Search Results: solarwinds

Microsoft: SolarWinds Hackers Viewed, Downloaded Source Code for Azure, Intune, Exchange Components

In new blog, Microsoft maintains that none of its tools were leveraged to further attack victims of the SolarWinds supply chain hack.

February 22, 2021 Zachary Comeau Leave a Comment

Although Microsoft maintains that none of its tools were leveraged by the threat group behind the SolarWinds Orion compromise, the company did disclose that the hackers viewed source code for a small subset of Azure, Intune and Exchange components. In a Microsoft Security Response Center blog on the final update of the company’s internal investigation […]

U.S. Officials: About 100 Companies Compromised in SolarWinds Attack

The number of private sector companies that fell victim to the SolarWinds attack is now around 100, mostly tech companies.

February 18, 2021 Zachary Comeau Leave a Comment

The number of private sector companies that fell victim to the SolarWinds attack is now around 100, according to U.S. officials who gave a briefing on the large-scale sophisticated supply chain attack that used popular IT management software as an initial access. In a White House briefing Wednesday, Anne Neuberger, the deputy national security advisor […]

SolarWinds Attack The ‘Largest And Most Sophisticated’ Ever, Microsoft CEO Says

MIcrosoft estimates that over 1,000 engineers worked on the massive SolarWinds supply chain compromise as details continue to emerge.

February 16, 2021 Zachary Comeau Leave a Comment

Cybersecurity experts and government officials from around the world are still putting the pieces together to understand the full scope of the SolarWinds supply chain compromise. We’re getting a better idea of just how organized and sophisticated the attack was, thanks to people like Microsoft President Brad Smith. In a recent interview on “60 Minutes”, […]

Report Says Chinese Hackers Also Used SolarWinds to Hack U.S. Agency; More Details Emerge

New reports indicate that Chinese hackers were responsible for attacks leveraging SolarWinds products, although separate from the larger supply chain hack.

February 3, 2021 Zachary Comeau Leave a Comment

According to new reports, a separate group of hackers are thought to have exploited a software flaw in SolarWinds’ products to break into U.S. government computers last year. Reuters, citing sources familiar with the investigations, reported Tuesday that suspected Chinese hackers used SolarWinds to hack into the National Finance Center, a federal payroll agency within […]

Report: 30% of Russian Hacking Victims Not Connected to SolarWinds

The hackers behind the SolarWinds compromise are believed to be leveraging other software providers to carry out cyber attacks, report says.

February 1, 2021 Zachary Comeau Leave a Comment

According to new reports, close to a third of the victims of a sophisticated threat actor leveraging the compromised SolarWinds’ Orion IT management platform didn’t run the popular network management software, raising fear that the hack goes deeper and into other software providers. The Wall Street Journal reports that about 30% of the private sector […]

Microsoft Explains How The SolarWinds Attacks Were Able To Be So Elusive For Months

In a new blog post, Microsoft security researchers explain how the SolarWinds attacks remained so elusive while they carried out their hacking operation.

January 22, 2021 Zachary Comeau Leave a Comment

Cybersecurity experts from Microsoft have released a long, detailed blog about the SolarWinds compromise that includes new information that helps IT professionals better understand how the attack transpired. The blog – a deep dive into how attackers moved from the initial backdoor and through customer networks – comes as the tech community continues to grapple […]

Malwarebytes CEO Says SolarWinds Attackers Accessed Internal Company Emails

Anti-malware software company Malwarebytes says SolarWinds attackers gained access to some internal company emails via Microsoft applications.

January 21, 2021 Zachary Comeau Leave a Comment

Anti-malware software company Malwarebytes company itself is a victim of the SolarWinds attack, the company announced this week. In a blog, CEO Marcin Kleczynski said the company has evidence of another intrusion vector that works by abusing applications with privileged access to Microsoft Office 365 and Azure environments. Attackers gained access to a limited subset […]

Symantec Discovers Fourth Malware Strain Used in SolarWinds Attack

Symantec says a fourth piece of malware associated with the SolarWinds attacks is used to spread across a victim's network.

January 20, 2021 Zachary Comeau Leave a Comment

Cybersecurity firm Symantec has uncovered an additional piece of malware used in the SolarWinds attacks, becoming the fourth piece of malware associated with the wide-ranging compromise of the popular IT management software. Symantec is calling this malware “Raindrop,” which is “a loader that delivers a payload of Cobalt Strike,” the company wrote in a blog […]

SolarWinds CEO: Company Might Not Be the Only Compromise

SolarWinds CEO Sudhakar Ramakrishna lays out attack timeline and says this should be a wake up call for the tech industry to share attack information.

January 14, 2021 Zachary Comeau Leave a Comment

In a new blog, SolarWinds’ CEO laid out what it is doing to respond to the compromise of its Orion IT management platform and what it knows so far about the attack. As many cybersecurity and IT experts have been saying, SolarWinds’ CEO Sudhakar Ramakrishna called the attack – which the company codenames Sunburst – […]

Chris Krebs CISA fired, CISA Ransomware Campaign

SolarWinds Hires Former CISA Director, Facebook Security Exec

SolarWinds has hired former CISA Director Chris Krebs and former Facebook security executive Alex Stamos as company looks to recover from hack.

January 11, 2021 Zachary Comeau Leave a Comment

In a bid to repair its image and solve its recent cybersecurity issues, IT management software provider SolarWinds has hired former U.S. Cybersecurity and Infrastructure Agency (CISA) Director Chris Krebs and former Facebook security executive Alex Stamos. First reported by the Financial Times, SolarWinds is one of the first customers of the Krebs Stamos Group, […]