Here, we provide everything you need to know about the SolarWinds breach, how it infiltrates systems, and the ongoing response from infosec industry experts and vendors. Investigations into the SolarWinds backdoor cyber attack so far point to Russian espionage. The breach appears to have affected 3% of the Office 365 mailboxes, and the Department said there's no indication that classified information was affected. Department of Justice published a statement saying the global SolarWinds incident affected multiple federal agencies - including the Justice Department's Microsoft Office 365 email system. Major tech companies, including Cisco, Intel, Microsoft and Nvidia, reported malicious SolarWinds updates, though the companies say there is no evidence that threat actors breached their networks. The Cybersecurity and Infrastructure Security Agency (CISA) and the Office of the Director of National Intelligence said in a joint statement with the FBI in December 2020 that the attacks are ongoing and widespread. The attack allowed threat actors to access government and enterprise networks worldwide. disclosed in December 2020, that suspected nation-state hackers had successfully carried out a vast supply chain attack on SolarWinds Orion, a popular IT performance monitoring platform. The ongoing SolarWinds breach also shines a light on how dangerous a supply chain attack can be and gives infosec pros yet another reason to evaluate their security systems and processes.įireEye Inc. The pervasiveness of SolarWinds backdoor attack, the sophistication of the hackers behind it and the number of high-profile victims make it the biggest cyber attack of 2020 - and possibly the past decade.

Biden picks cyber veteran to reinvigorate security response.

SolarWinds struggles with response to supply chain attack.

Microsoft, FireEye deliver kill switch for SolarWinds backdoor.

FireEye releases new tool to fight SolarWinds hackers.

Microsoft, SolarWinds in dispute over nation-state attacks.

Senate hearing raises questions about SolarWinds backdoors.

SolarWinds puts national cybersecurity strategy on display.

White House: 100 companies compromised in SolarWinds hack.

SolarWinds hackers attacking more IT supply chain targets.

How SolarWinds attack will change CISOs' priorities.

SolarWinds confirms supply chain attack began in 2019.

SolarWinds attack almost certainly work of Russian spooks.

SolarWinds breach highlights dangers of supply chain attacks.

SolarWinds backdoor shakes infosec industry.

FireEye red team tools stolen in cyber attack.

SolarWinds backdoor used in nation-state cyber attacks.

SolarWinds hackers stole Mimecast source code.

Senate hearing: SolarWinds evidence points to Russia.

SolarWinds response team recounts early days of attack.

CISOs on alert following SEC charges against SolarWinds.SolarWinds hackers Nobelium spotted using a new backdoor.SolarWinds backdoor infected tech giants, impact unclear.

SolarWinds chases multiple leads in breach investigation.SolarWinds Office 365 environment compromised.Mimecast certificate compromised by SolarWinds hackers.

Malwarebytes breached by SolarWinds hackers.SolarWinds warns of zero-day vulnerability under attack.SolarWinds hackers still active, using new techniques.SEC charges SolarWinds for security failures, fraud.SolarWinds fires back at SEC over fraud charges.Risk & Repeat: Breaking down SEC charges against SolarWinds.

Solarwinds breach