Hot Topics

Orion

SolarWinds laptop judge order litigation

SEC Sends Wells Notice to SolarWinds Executives

| | Orion, SEC, Security Exchange Commission, SolarWinds, SUNBURST, Wells Notice
On June 23, 2023, SolarWinds revealed via an SEC Form 8-K filing that the U.S. Securities and Exchange Commission (SEC) notified the company that “certain current and former executive officers and employees ...
Security Boulevard
SolarWinds: What Hit Us Could Hit Others

SolarWinds: What Hit Us Could Hit Others

| | CrowdStrike, fireeye, Orion, Other, SolarWinds breach, Sudhakar Ramakrishna, Sunburst malware, Sunspot malware, Teardrop malware
New research into the malware that set the stage for the megabreach at IT vendor SolarWinds shows the perpetrators spent months inside the company's software development labs honing their attack before inserting ...
Krebs on Security
Sealed U.S. Court Records Exposed in SolarWinds Breach

Sealed U.S. Court Records Exposed in SolarWinds Breach

| | Administrative Office of the U.S. Courts, Data breaches, Nicholas Weaver, Orion, PACER, SolarWinds breach, U.S. Justice Department
The ongoing breach affecting thousands of organizations that relied on backdoored products by network software firm SolarWinds may have jeopardized the privacy of countless sealed court documents on file with the U.S ...
Krebs on Security

Solar Winds Blow Hard

| | cisa, Cyber-Espionage Report, cybercrime, cyberpandemic, Cyberwarfare, General, Information Security News, Orion, software monocultures, SolarWinds, Spotlight, Third Party Risk
Unbelievable! But true. The enormous hack, purportedly by Russia (per Secretary of State Mike Pompeo and others), of major U.S. government agencies and the U.S.’s biggest corporations—apparently some 18,000 organizations according to ...
BlogInfoSec.com
SolarWinds/SUNBURST Backdoor, Third-Party and Supply Chain Security

SolarWinds/SUNBURST Backdoor, Third-Party and Supply Chain Security

| | backdoor, Cybersecurity, Digital Privacy, Episodes, fireeye, hacked, Hacking, Malware, Orion, Podcast, Privacy, Russia, SolarWinds, SUNBURST, supply chain, Supply Chain Attacks, Weekly Edition
In episode 152 for December 21st 2020: A discussion about the SolarWinds Orion backdoor, third-party security, and the threat of supply chain attacks with co-host Kevin Johnson. ** Links mentioned on the ...
The Shared Security Show
Malicious Domain in SolarWinds Hack Turned into ‘Killswitch’

Malicious Domain in SolarWinds Hack Turned into ‘Killswitch’

| | Data breaches, fireeye, GoDaddy, Microsoft, Orion, RedDrip Team, SolarWinds breach, SUNBURST
A key malicious domain name used to control potentially thousands of computer systems compromised via the months-long breach at network monitoring software vendor SolarWinds was commandeered by security experts and used as ...
Krebs on Security
Finding SUNBURST Backdoor with Zeek Logs & Corelight

Finding SUNBURST Backdoor with Zeek Logs & Corelight

| | C2, Corelight Labs, dns, fireeye, http, Industry, Mandiant, Network IOC, OIP, Orion, PT, SIEM, Sigma rules, Solarigate, SolarWinds, Splunk, SUNBURST, x509, Zeek
John Gamble, Director of Product Marketing, Corelight FireEye’s threat research team has discovered a troubling new supply chain attack targeting SolarWind’s Orion IT monitoring and management platform. The attack trojanizes Orion software ...
Bright Ideas Blog
U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

| | APT29, Cybersecurity and Infrastructure Security Agency, Data breaches, Department of Commerce, FireEye hack, Microsoft, Orion, Reuters, SolarWinds breach, The Coming Storm, U.S. Treasury Department
Communications at the U.S. Treasury and Commerce Departments were reportedly compromised by a supply chain attack on SolarWinds, a security vendor that helps the federal government and a range of Fortune 500 ...
Krebs on Security