Bose Work Remote Promo
Bose Work Remote Mobile Promo
Take Our Survey on Your IoT/Collaboration Plans & You Could Win a 60" 4K UHD Display!
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

My TechDecisions

  • COVID-19 Update
  • Best of Tech Decisions
  • Topics
    • Video
    • Audio
    • Mobility
    • Unified Communications
    • IT Infrastructure
    • Network Security
    • Physical Security
    • Facility
    • Compliance
  • RFP Resources
  • Downloads
  • Podcasts
  • Subscribe
  • Project of the Week
  • About Us
    SEARCH
IT Infrastructure, Network Security, News

U.S. Officials: About 100 Companies Compromised in SolarWinds Attack

The number of private sector companies that fell victim to the SolarWinds attack is now around 100, mostly tech companies.

February 18, 2021 Zachary Comeau Leave a Comment

SolarWinds Cyber Incident Costs

The number of private sector companies that fell victim to the SolarWinds attack is now around 100, according to U.S. officials who gave a briefing on the large-scale sophisticated supply chain attack that used popular IT management software as an initial access.

In a White House briefing Wednesday, Anne Neuberger, the deputy national security advisor for cyber and emerging technology in the Biden Administration, told reporters that about 100 private sector companies and nine federal U.S. agencies were compromised by alleged Russian hackers who inserted a backdoor via malicious code in a spring 2020 update of the SolarWinds Orion platform.

According to Neuberger, many of the private sector companies are technology companies who make products that could be used to launch additional attacks.

However, Neuberger echoed a common sentiment of the IT and cybersecurity industry: what we know is probably just the tip of the iceberg.

“So due to the sophistication of the techniques that were used, we believe we’re in the beginning stages of understanding the scope and scale, and we may find additional compromises, particularly given the technology companies that were compromised,” Neuberger said, adding that officials haven’t ruled out the possibility of additional supply chain compromises stemming from the attack.

The investigation, she said, could take several months or longer.

“This is a sophisticated actor who did their best to hide their tracks,” Neuberger said. “We believe it took them months to plan and execute this compromise.  It’ll take us some time to uncover this, layer by layer.”

The briefing comes shortly after Microsoft President Brad Smith said in an interview that the attack is the largest and most sophisticated cyber intrusion in history.

In an interview with “60 Minutes,” Smith said Microsoft security experts have deduced that more than 1,000 engineers were behind the attack.

Microsoft itself was a victim of the attack, but the company has so far only disclosed that intruders viewed internal source code and did not access customer data.

However, cybersecurity firm FireEye – also the company that first discovered the attack – has said the attackers stole its tools that are used to test customer network defenses.

Other tech firms that have said they were targeted include CrowdStrike, Malwarebytes, Palo Alto networks, Mimecast and others.

In the U.S. government, victims include the Treasury Department, Department of Homeland Security, Department of State, Department of Energy and the Justice Department, among others.

Tagged With: Cybersecurity, SolarWinds

Related Content:

  • FireEye Microsoft SolarWinds FireEye, Microsoft Detail Additional Malware Linked to SolarWinds…
  • Microsoft Teams AVI-SPL, Unify Square To Co-Deliver Microsoft Teams User…
  • Nureva HDL300 Audio Conferencing System Nureva HDL300 Audio Conferencing Systems Covers Nearly 30…
  • AV installers, intelligent automation benefits, definition, knowledge management automation How Knowledge Management Automation Is Key to Post-Pandemic…

Free downloadable guide you may like:

  • Introducing the IT Pro MBA: Vetting Technology

    At some point in your career there is going to come a time when you are tasked with reviewing and vetting new tech to implement into your company. Sometimes the hardest part of the whole thing is just getting started. In this new series from My TechDecisions, the IT Pro MBA: Vetting Technology guide deep-dives […]

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Get the FREE Tech Decisions eNewsletter

Sign up Today!

Latest Downloads

Introducing the IT Pro MBA: Vetting Technology

At some point in your career there is going to come a time when you are tasked with reviewing and vetting new tech to implement into your company. ...

9 Technology Products to Help Combat COVID-19 Spread in the Workplace

As the Coronavirus continues on and leads us further into uncertainty, the question remains, “when do we return to the office?” For some the answer...

Top 9 Reasons Enterprise IT Leaders Are Moving Their Video Surveillance to the Eagle Eye Cloud

Working in IT has enough challenges without adding in the complications of surveillance video. Things like total cost of maintenance, how the VMA m...

View All Downloads

Would you like your latest project featured on TechDecisions as Project of the Week?

Apply Today!
Sharp Microsoft Collaboration HQ Logo

Learn More About the
Windows Collaboration Display

More from Our Sister Publications

Get the latest news about AV integrators and Security installers from our sister publications:

Commercial IntegratorSecurity Sales

Footer

TechDecisions

  • Home
  • Welcome to TechDecisions
  • Subscribe to the Newsletter
  • Contact Us
  • Media Solutions & Advertising
  • Comment Guidelines
  • RSS Feeds
  • Terms of Use
  • Privacy Policy
  • Twitter
  • Facebook
  • Linkedin

Free Technology Guides

FREE Downloadable resources from TechDecisions provide timely insight into the issues that IT, A/V, and Security end-users, managers, and decision makers are facing in commercial, corporate, education, institutional, and other vertical markets

View all Guides
TD Project of the Week

Get your latest project featured on TechDecisions Project of the Week. Submit your work once and it will be eligible for all upcoming weeks.

Enter Today!

© 2021 Emerald X, LLC. All rights reserved.