Order Reprints Text size SolarWinds has said close to 18,000 organizations could have been affected by malware inserted within updates to its Orion software. Bronte Wittpenn/Bloomberg SolarWindsissued a security advisory providing detailed information on steps customers should take in response to the continuing attack on the company’s widely used Orion IT management system—and confirming that two separate pieces of malware are now corrupting some installations. The company has previously said that close to 18,000 organizations could have been vulnerable as a result of malware inserted into Orion software updates earlier this year. As SolarWinds explains in the advisory, issued Thursday, the original cyberattack inserts a vulnerability—now known as Sunburst—into the Orion software. That attack, the company said, “could potentially allow an attacker to compromise the server on which the Orion products run.”