SolarWinds Incident

Q1 2021 Quarterly Briefing
HALOCK Reasonable Security Cyber Breaches Bulletin SolarWinds SUNBURST Trojan Backdoor

SolarWinds Incident

WHAT HAPPENED?

A Russian government hacking unit known as UNC2452 accessed and compromised SolarWinds’ Orion software.

The hackers were able to laterally move into SolarWinds’ customers’ networks to launch more malware at those customers, including government and big tech.

Tech service providers, such as Microsoft Azure, are now experiencing attacks trough SolarWinds exploits.

WHAT DOES THAT MEAN TO YOU?

The tech supply chain is compromised by well-funded state actors.

If you are a SolarWinds customer, follow SolarWinds’ guidance for protecting your systems.

You must include high-tech supply-chain (cloud) providers in your third-party risk management program. Develop alternative stand-by plans for when critical supply chain is reported as compromised (such as on-site AD).

ADDITIONAL INFORMATION

Read Full Article