Page 2 - Roundtable Wrap News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Get Permission Investigators probing the supply chain attack that hit SolarWinds say attackers successfully hacked the company's Microsoft Visual Studio development tools to add a backdoor into software builds. The backdoor, dubbed "Sunburst," was added to the company's Orion network monitoring software beginning in March 2020. Up to 18,000 customers installed and ran the Trojanized software. Attackers then used the backdoor to target a subset of customers, perhaps numbering in the hundreds, for second-stage attacks, which could have led to data exfiltration, eavesdropping - including email ...

The SolarWinds’ Orion breach, which is believed to have affected 18,000 organizations, led to follow-on attacks on government agencies and others. Although the agencies did not name the hacking group responsible, The Washington Post and other news media outlets have reported that the threat actor is likely a Russian APT known as APT29 or Cozy Bear. Russia has denied playing any role the attack (see: Dormancy Issue Kaspersky researchers say they found three overlaps between Sunburst and Kazuar. That includes the "sleeping" algorithm that calculates the time between when the backdoors are pl...

Get Permission Mounting evidence points to the "serious compromise" of SolarWinds' Orion software having been an intelligence gathering operation that was "likely" run by Russia, according to a joint U.S. intelligence assessment. It's the first public attribution to be issued by the Trump administration for the massive supply chain attack against SolarWinds. The attack campaign compromised systems at thousands of organizations for up to nine months. It was discovered not by the National Security Agency, but rather by FireEye, a private cybersecurity firm based in California that was one of t...