What Data Center IT Security Pros Must Know About the SolarWinds Vulnerability The unprecedented attack, whose full scope is yet to be determined, gave those behind it access to some of the most sensitive enterprise systems.
On Sunday, we learned that federal agencies and other organizations had been penetrated by nation-state attackers, identified as Russian by multiple sources.
Though the definitive attribution for the attacks won t come for a while, we do know how the attack occurred.
SolarWinds Orion, a widely used network monitoring tool, had been compromised. In what s known as a supply chain attack, the attackers injected malware into the update code last March, and customers had been installing a Trojan each time they ran an update.