Compromiseseverity: Critical2020-12-13
SolarWinds Orion supply-chain compromise disclosed
published by CISA
Actor
Russian state-sponsored intrusion set publicly attributed to the SVR. Long history of espionage operations against Western government, diplomatic, think tank, and technology targets, including the So…
Summary
FireEye and Microsoft disclosed a sophisticated supply-chain compromise of SolarWinds Orion software, attributed to APT29. The trojanized SUNBURST update reached approximately 18,000 customers and enabled second-stage access to U.S. federal agencies and Fortune 500 networks.
Tags
supply-chainespionageus-government