Winds Attack News Today

Mounting evidence points to the "serious compromise" of SolarWinds' Orion software having been an intelligence gathering operation "likely" run

Get Permission Mounting evidence points to the "serious compromise" of SolarWinds Orion software having been an intelligence gathering operation that was "likely" run by Russia, according to a joint U.S. intelligence assessment. Its the first public attribution to be issued by the Trump administration for the massive supply chain attack against SolarWinds. The attack campaign compromised systems at thousands of organizations for up to nine months. It was discovered not by the National Security...

Lou Manousos, CEO, RiskIQ The SolarWinds breach is a case study in how attackers can subvert a widely used piece of software to turn it to their advantage, says Lou Manousos, CEO of RiskIQ. “The magnitude of this attack is hard to overstate,” Manousos says. “Having a supply chain vendor like this - with a legitimate program that is trusted - used to carry out an attack, it’s just unprecedented. ”The number of organizations that have been hit, the types of organizations - some really a...