Page 2 - Orion Improvement Program News Today

CISOs around the world whose organizations use SolarWinds’ Orion IT management platform are scrambling to patch the suite and look for signs of data theft after reports Sunday that recent security updates for the platform had been infected with malware. This led to numerous data breaches including last week’s embarrassing hack of security vendor FireEye. It wasn’t immediately clear if this supply chain hack through SolarWinds is related to Sunday’s news that unnamed hackers broke into t...

18,000 Organizations Possibly Compromised in Massive Supply-Chain Cyberattack Nation-state attackers used poisoned SolarWinds network management software updates to distribute malware; US government orders federal civilian agencies to immediately power down the technology. In what may well turn out to be one of the most significant supply-chain attacks in recent years, a likely nation-state backed group compromised systems at SolarWinds and inserted malware into updates of the companys widely ...

The attack was mounted via SolarWinds Orion, in a manual and targeted supply-chain effort. The U.S. Department of Homeland Security (DHS), plus the Treasury and Commerce departments, have been hacked in an attack related to the FireEye compromise last week, according to reports. In addition, defense contractors and enterprises were caught up in the attack, FireEye said, which was carried out using a supply-chain attack targeting a SolarWinds network-management platform. The Russian foreign-inte...

Russias Cozy Bear fingered, FireEye details injected backdoor and says its worldwide Share Copy Updated SolarWinds Orion IT monitoring platform has been compromised, and speculation is swirling it was used as a base camp by state-backed hackers to infiltrate major US government organizations. Kevin Thompson, SolarWinds president and CEO, said his company is "aware of a potential vulnerability" that may have been in "updates which were released between March and June 2020 to our Orion mo...