Page 2 - Orion Improvement Program News Today : Breaking News, Live Updates & Top Stories | Vimarsana

SolarWinds supply chain attack explained: Why organisations were not prepared A group believed to be Russia's Cozy Bear gained access to government and other systems through a compromised update to SolarWinds' Orion software. This scenario is not in most threat models Credit: Dreamstime The recent breach of major cyber security company FireEye by nation-state hackers was part of a much larger attack that was carried out through malicious updates to a popular network monitoring product and impacted major government organisations and companies. The incident highlights the severe i...

Russia’s Latest Cyberattack Highlights Moscow’s Boldness The Russian cyberespionage group is thought to have gained backdoor access to hundreds of entities, such as the United States Treasury, Department of Commerce, and Department of Homeland Security, and many other private and government entities. The Russian Cyber-Bear has roared once again. The notorious Advanced Persistent Threat (APT) 29, or Cozy Bear, seems to have forgone hibernation this winter in order to continue carrying out a months-long, ambitious, and creative supply chain attack against a server management and performanc...

SolarWinds estimates that between last March and June, roughly 18,000 user organizations downloaded updates of its Orion software that Russian APT actors allegedly corrupted with Sunburst backdoor malware. ("SolarWinds letters" by sfoskett is licensed under CC BY-NC-SA 2.0) The U.S. Department of Homeland Security, Treasury Department and FireEye are among the most prominent victims affected by the supply chain attack on SolarWinds network monitoring software. But these data breaches are just scratching the surface of one of the most significant foreign hacking incidents in histor...

The recent breach of major cybersecurity company FireEye by nation-state hackers was part of a much larger attack that was carried out through malicious updates to a popular network monitoring product and impacted major government organizations and companies. The incident highlights the severe impact software supply chain attacks can have and the unfortunate fact that most organizations are woefully unprepared to prevent and detect such threats. A hacker group believed to be affiliated with the Russian government gained access to computer systems belonging to multiple US government department...

Hackers believed to be working for Russia have been monitoring internal email traffic at the U.S. Treasury and Commerce departments, according to people familiar with the matter, adding they feared the hacks uncovered so far may be the tip of the iceberg. [...] The cyber spies are believed to have gotten in by surreptitiously tampering with updates released by IT company SolarWinds, which serves government customers across the executive branch, the military, and the intelligence services, according to two people familiar with the matter. The trick - often referred to as a “supply chain atta...