Orion Improvement Program News Today

To print this article, all you need is to be registered or login on Mondaq.com. On Sunday, December 13, 2020, SolarWinds announced that it had learned of a "highly sophisticated, manual supply chain attack" by a nation state affecting its Orion Platform, which is used by a wide variety of public and private sector organizations for IT infrastructure monitoring and management. In this attack, adversaries were able to compromise the Orion software build system for certain ...

| About | Andy Patrizio is a freelance technology writer based in Orange County, California. Hes written for a variety of publications, ranging from Toms Guide to Wired to Dr. Dobbs Journal. SolarWinds roundup: Fixes, new bad actors, and what the company knew Reporting since the SolarWinds hack was revealed indicates the company was warned about insecurities years ago, and another hack has been discovered. v-graphix / Getty Images The SolarWinds Orion security breach is ...

To embed, copy and paste the code into your website or blog: On Sunday, December 13, 2020, SolarWinds announced that it had learned of a “highly sophisticated, manual supply chain attack” by a nation state affecting its Orion Platform, which is used by a wide variety of public and private sector organizations for IT infrastructure monitoring and management.  In this attack, adversaries were able to compromise the Orion software build system for certain versions of the software, and trojani...

What Data Center IT Security Pros Must Know About the SolarWinds Vulnerability The unprecedented attack, whose full scope is yet to be determined, gave those behind it access to some of the most sensitive enterprise systems. On Sunday, we learned that federal agencies and other organizations had been penetrated by nation-state attackers, identified as Russian by multiple sources. Though the definitive attribution for the attacks wont come for a while, we do know how the attack occurred. S...

Five days after FireEye detailed the theft of about 300 of its proprietary cybersecurity tools, SolarWinds announced that its Orion IT monitoring platform had also been compromised by hackers believed to be sponsored by the Russian government. Together, the attack that originated with a SolarWinds vulnerability turned over critical cybersecurity infrastructure to the malicious actors, along with potential access to thousands of global entities’ sensitive information. As the cybersecurity worl...

SolarWinds supply chain attack explained: Why organisations were not prepared A group believed to be Russias Cozy Bear gained access to government and other systems through a compromised update to SolarWinds Orion software. This scenario is not in most threat models Credit: Dreamstime The recent breach of major cyber security company FireEye by nation-state hackers was part of a much larger attack that was carried out through malicious updates to a popular network monitoring produ...

Russia’s Latest Cyberattack Highlights Moscow’s Boldness The Russian cyberespionage group is thought to have gained backdoor access to hundreds of entities, such as the United States Treasury, Department of Commerce, and Department of Homeland Security, and many other private and government entities. The Russian Cyber-Bear has roared once again. The notorious Advanced Persistent Threat (APT) 29, or Cozy Bear, seems to have forgone hibernation this winter in order to continue carrying out a ...

SolarWinds estimates that between last March and June, roughly 18,000 user organizations downloaded updates of its Orion software that Russian APT actors allegedly corrupted with Sunburst backdoor malware. ("SolarWinds letters" by sfoskett is licensed under CC BY-NC-SA 2.0) The U.S. Department of Homeland Security, Treasury Department and FireEye are among the most prominent victims affected by the supply chain attack on SolarWinds network monitoring software. But these data breache...

The recent breach of major cybersecurity company FireEye by nation-state hackers was part of a much larger attack that was carried out through malicious updates to a popular network monitoring product and impacted major government organizations and companies. The incident highlights the severe impact software supply chain attacks can have and the unfortunate fact that most organizations are woefully unprepared to prevent and detect such threats. A hacker group believed to be affiliated with the...

Hackers believed to be working for Russia have been monitoring internal email traffic at the U.S. Treasury and Commerce departments, according to people familiar with the matter, adding they feared the hacks uncovered so far may be the tip of the iceberg. [...] The cyber spies are believed to have gotten in by surreptitiously tampering with updates released by IT company SolarWinds, which serves government customers across the executive branch, the military, and the intelligence services, accor...