Page 29 - Vinoth Kumar News Today : Breaking News, Live Updates & Top Stories | Vimarsana

'solarwinds123' won't inspire confidence, if true Share Copy Updated SolarWinds, the maker of the Orion network management software that was subverted to distribute backdoored updates that led to the compromise of multiple US government bodies, was apparently told last year that credentials for its software update server had been exposed in a public GitHub repo. Vinoth Kumar, a security researcher, claimed on Tuesday he had made such a report to SolarWinds last November, warning that it could be used to upload files to the server. The password he said he found, in plaintext for all to...

SolarWinds Was Warned Last Year Its Server Could Be Accessed With Password ‘Solarwinds123’ A security researcher alerted network software giant SolarWinds last year that its software update server could be accessed using the password: “solarwinds123.” “This could have been done by any attacker, easily,” Vinoth Kumar, the security researcher, said about discovering the relatively insecure password. SolarWinds is facing increased scrutiny after disclosing that it has been the subject of a major hack. The company serves the vast majority of Fortune 500 companies and major U.S. govern...

Scope of SolarWinds hack grows as Microsoft moves to protect customers SHARE More details continue to emerge on the hack of software from SolarWinds WorldWide LLC used by the U.S. government and others as Microsoft Corp. today moved to protect customers from the compromise. The hack, first reported Sunday and blamed on Russian state-sponsored hackers, came about after SolarWinds pushed compromised software to some 18,000 of its customers in both March and June. The dates are relevant because it’s likely that those behind the compromise have been stealing data sinc...

Wed, Dec 16th 2020 3:27am — Tim Cushing As was noted here earlier, up to 18,000 customers of globally-dominant network infrastructure vendor SolarWinds may have been compromised by malicious hackers. The hackers -- presumed to be operating on behalf of the Russian government -- deployed tainted updates (served up by SolarWinds) that gave them backdoors to snoop on internal communications and exfiltrate sensitive data. The attack was so widespread and potentially catastrophic, the DHS's cyber wing issued an emergency directive that stated the only way to mitigate damage was to airgap devices...

minute read Share this article: Meanwhile, FireEye has found a kill switch, and Microsoft and other vendors are quickly moving to block the Sunburst backdoor used in the attack. SECOND UPDATE A perfect storm may have come together to make SolarWinds such a successful attack vector for the global supply-chain cyberattack discovered this week. Researchers said that includes  its use of a default password (“SolarWinds123”) that gave attackers an open door into its software-updating mechanism; and, SolarWinds’ deep visibility into customer networks. Meanwhile, the U.S. Cybers...