Since the compromise of the SolarWinds Orion update mechanism two years ago this month, governments and the IT industry have made strides in trying to reduce the attack surface of applications. However, Google believes software supply chain security is still one of the most critical security risks facing the world. "There is an urgent need
SolarWinds settled a class-action lawsuit filed by shareholders against the company, several top executives and two main private equity owners in the wake of the Orion breach.
TA569 has modified the JavaScript of a legitimate content and advertising engine used by news affiliates, in order to spread the FakeUpdates initial access framework.