A new Mimecast update reveals the SolarWinds hackers accessed several “limited” source code repositories.
Hackers who compromised Mimecast networks as part of the SolarWinds espionage campaign have swiped some of the security firm’s source code repositories, according to an update by the company.
The email security firm initially reported that a certificate compromise in January was part of the sprawling SolarWinds supply-chain attack that also hit Microsoft, FireEye and several U.S. government agencies.
Attackers were found initially to have stolen a subset of Mimecast customers’ email addresses and other contact information, as well as certain hashed and salted credentials. However, in the most recent part of its investigation into the SolarWinds hack, Mimecast said it has found evidence that a “limited” number of source code repositories were also accessed.
English By Jeff Seldin Share on Facebook Print this page
The administration of new U.S. President Joe Biden is essentially doing away with the traditional distinction between domestic policy and foreign policy when it comes to tackling threats to the country’s security. Foreign policy is domestic policy and domestic policy is foreign policy, national security adviser Jake Sullivan told a virtual audience Friday. We have to put ourselves in a position of strength to be able to deal with the challenges we face around the world,” Sullivan said. Right now, the most profound pressing national security challenge for the United States is getting our own house in order.
BankInfoSecurity
Compliance
March 29, 2021
Compliance
Compliance
March 29, 2021
Compliance
Compliance
AsiaSecEditor) • January 27, 2021 Get Permission From left: Abid Adam, group CISO and group head of privacy at Axiata and Sujit Christy, group CISO at, John Keells Holdings
Organizations in the APAC region are not immune to the impact of the SolarWinds supply chain hack, so it’s essential that they reassess their risk management practices and audit their suppliers, two security experts stress.
Companies considering using new suppliers must take steps to ensure this does not create additional exposure to risk, says Malaysia-based Abid Adam, group CISO and group head of privacy at Axiata, a large telecommunications firm.
Dec. 23, 2020 9:19 am ET | WSJ Pro
Hello. Uncertainty looms for companies as the U.K. looks set to cut legal ties with the European Union without an agreement in place for the flow of personal data, WSJ Pro’s Catherine Stupp reports.
SolarWinds hack: Biden vows forceful response; U.S. House Intelligence leader wants details; Senators plan hearings on the incident, along with new legislation, when new Congress convenes.
Other news: Covid-19 vaccine scams; Forward Air warns of potential revenue loss after ransomware attack disrupts operations; Facebook to expand account security.
Post-Brexit Data Risks
Companies face privacy, data-flow risks in post-Brexit Britain. Companies that do business in the U.K. are preparing for a disruptive start to the year as the country looks set to cut legal ties with the European Union without an agreement in place for personal data flows.