General Discussion
Related: Editorials & Other Articles, Issue Forums, Alliance Forums, Region ForumsSolarWinds hack hits major tech companies and hospital system: What you need to know
A Russian intelligence agency is carrying out a sophisticated malware campaign, striking several US federal agencies and private companies including Microsoft, according to the State Department, news reports and analysis from security firms. It all started earlier this year, when hackers compromised software made by cybersecurity SolarWinds.
The hacked company sells software that lets an organization see what's happening on its computer networks. Hackers inserted malicious code into an updated version of the software, called Orion. Around 18,000 SolarWinds customers installed the tainted updates onto their systems, the company said. The compromised update process has had a sweeping effect, the scale of which keeps growing as new information emerges.
On Saturday, President Donald Trump floated on Twitter the idea that China might be behind the attack. Trump, who didn't provide evidence to support the suggestion of Chinese involvement, tagged Secretary of State Mike Pompeo, who had earlier said in a radio interview that "we can say pretty clearly that it was the Russians that engaged in this activity."
US national security agencies issued a joint statement Wednesday calling it a "significant and ongoing hacking campaign" that's affecting the federal government. It's still unclear how many agencies are affected or what information hackers might have stolen so far, but by all accounts the malware is extremely powerful. According to analysis by Microsoft and security firm FireEye, both of which were also infected with the malware, it gives hackers broad reach into impacted systems.
On Thursday, Microsoft said it had identified more than 40 customers that were targeted in the hack. More information is likely to emerge about the hack and its aftermath. Here's what you need to know about the SolarWinds hack:
-more-
https://www.cnet.com/news/solarwinds-hack-hits-major-tech-companies-and-hospital-system-what-you-need-to-know/?ftag=CAD-04-10abf6e&bhid=24447454298893839703959737945916&mid=13207131&cid=534320049
Irish_Dem
(81,277 posts)I don't think he was just going fishing.
TheBlackAdder
(29,981 posts).
Many in IT were saying how secure Open-Source Software is because many people review the code, when in reality everyone assumes other people are reviewing it and most of the people detecting vulnerabilities are hackers, nation-state actors and the occasional college academic.
On top of that, hackers have infiltrated most of the Open-Source projects to inject their vulnerabilities.
So, when people grab that free piece of software, thinking they are saving money, they are really just opening up their systems for intrusion and abuse.
.
CrispyQ
(40,970 posts)He'll wait until after Biden is sworn in before he stirs up any mischief.
Irish_Dem
(81,277 posts)I think he could threaten Biden: "nice little nuclear stockpile there you have Joe, hate for anything to happen it."
StClone
(11,869 posts)For now it seems we will be vulnerable as the malware is installed in places, hidden, inactive and set to steal data, corrupt files, or disrupt or disable systems through the country. Slowly we will weed it out.
We will learn from this and the system will come back stronger but there are always vulnerabilities. Russia is now very much a pariah throughout the world. The Biden administration will build goodwill and cooperation to go tough on Putin. I'd love to squeeze the ba jesus out of that rat'fer in every way possible. It is going to get rough for Pooty. Already many RU addresses are being shut down on the internet without Biden already in charge. Watch this space.
roamer65
(37,957 posts)Snip, snip, snip...