About this site
Previous work
Projects
Identifications of the victims of the attack
Retrieved 2023-03-06
SolarWinds Breach Revealed Shortcomings At CISA, DHS IG Report Shows
Retrieved 2021-12-13
Did a Russian Cyberattack Affect the Election? Officials Couldn't Be Sure
Retrieved 2021-12-12
Massive Software Flaw With Global Reach Forces Quebec To Shut Government Websites (The Street Journal)
Retrieved 2021-12-06
SolarWinds hackers have been quietly targeting governments, cloud providers (scmedia)
SolarWinds hackers have been quietly targeting governments, cloud providers (scmedia)
Retrieved 2021-12-03
Microsoft says it identified 40+ victims of the SolarWinds hack | #microsoft | #hacking (#cybersecurity - NATIONAL CYBER SECURITY NEWS TODAY)
Retrieved 2021-10-25
SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat
Retrieved 2021-10-08
Hackers of SolarWinds stole data on U.S. sanctions policy, intelligence probes (Reuters)
The SolarWinds hack may have been more damaging than previously thought
Retrieved 2021-10-06
Mandia Alerted NSA on FireEye’s SolarWinds Breach
Russian hackers behind SolarWinds hack are trying to infiltrate US and European government networks (CNNPolitics)
Retrieved 2021-10-01
Hospital ransomware attack led to infant's death, lawsuit alleges (Healthcare IT News)
Retrieved 2021-09-26
Autodesk reveals it was targeted by Russian SolarWinds hackers | #computerhacking (#hacking - National Cyber Security News Today)
Retrieved 2021-09-08
Lawmakers question impact of SolarWinds hack on US attorneys' offices (hill)
Retrieved 2021-09-04
Autodesk Disclosed it was Targeted in SolarWinds Hack (IT Security News)
Autodesk Says Company Was Targeted by SolarWinds Attackers - Latest Hacking News Today (HakTechs)
Retrieved 2021-09-02
Autodesk reveals it was targeted by Russian SolarWinds hackers – Techtwiddle (Technology News and Kicks)
Retrieved 2021-08-19
Most IT executives fear nation-state hacking tools will be used on them (IT PRO)
Retrieved 2021-08-03
SolarWinds: Russian hackers broke into email accounts at US attorney offices
Bitglass Security Spotlight: Ransomware Developments, Additional SolarWinds Victims, and More Data Breaches
DOJ states that Russians detained in SolarWinds have hacked federal prosecutors: NPR (Eminetra)
Retrieved 2021-07-31
SolarWinds hackers accessed over two dozen federal prosecutors' offices: DOJ (hill)
DOJ says SolarWinds hack impacted 27 US attorneys' offices (The Record by Recorded Future)
Retrieved 2021-07-30
Justice Department says Russians hacked federal prosecutors
Retrieved 2021-07-09
Another Cybersecurity Attack: State Department in Russian Crosshairs This Time (ClearanceJobs)
Retrieved 2021-07-08
Three new security plunders: Microsoft said it’s the same group behind SolarWinds hack
GOP allegedly hacked by APT29, known as Cozy Bear | 2021-07-08 (Security Magazine)
Russia (linked ‘Cozy Bear’ Hackers Breach Republican Party Computer Systems From Harlem To Harare)
Retrieved 2021-07-07
Russia ‘Cozy Bear’ Breached GOP as Ransomware Attack Hit (wapo)
Republican National Committee Hack: Russian Cozy Bear Group Breached Computers (Bloomberg)
Russian hackers targeted Republican National Committee last week, reports say (The Independent)
RNC says contractor breached in hack, GOP data secure (hill)
CRN
Attempted Hack of R.N.C. and Russian Ransomware Attack Test Biden (nyt)
A cyberattack on the R.N.C. was likely carried out by Russians, posing a challenge for Biden. (nyt)
Attempted to hack RNC and Russian ransomware attack test Biden (Eminetra)
Russian Hacker Group Cozy Bear Behind GOP Cyberattack: Reports (Tech Times)
Retrieved 2021-07-03
SolarWinds hack exposes Denmark’s central bank (IceNews - Daily News)
Retrieved 2021-07-02
Solar Winds Hackers Continue To Cause Grief (Cyber Security Hub)
Denmark's central bank affected by SolarWinds compromise. Notes from the underground. (Publicnewsportal)
Retrieved 2021-07-01
Microsoft Customers Warned of Targeted Scams by NOBELLIUM (Data Privacy + Cybersecurity Insider)
Retrieved 2021-06-30
SolarWinds hackers had access to Denmark's central bank for 7 months, report says (CyberScoop)
SolarWinds hackers remained in Denmark's central bank for monthsSecurity Affairs
Denmark’s Central Bank Compromised by SolarWinds Cyber Attack: Media Report
Danmarks Nationalbank’s comments on media reports about SolarWinds
Danish central bank denies suffering breach in SolarWinds hack (Central Banking)
SolarWinds Investigation Leads Microsoft to Another Security Breach Discovery (FindBiometrics)
SolarWinds Hackers Breach Microsoft Customer Support to Target its Customers (NY Press News)
Hackers Had Secret Access to Danish National Bank for Seven Months After SolarWinds Attack – Report (SGT Report)
SolarWinds hackers had access to Denmark’s central bank for months
Retrieved 2021-06-29
Denmark's central bank exposed in SolarWinds hack, media report says (Reuters)
Denmark's Central Bank hacked through SolarWinds vulnerability
SolarWinds Hackers Continue Assault With a New Microsoft Breach (Forbes Alert)
Microsoft: malicious cyber group Nobelium tried to attack entities in 36 countries (Israel Defense)
Russian hackers had months (long access to Denmark's central bank)
Retrieved 2021-06-28
Microsoft says new breach was discovered in probe by suspected SolarWinds hackers by Reuters (My Blog)
SolarWinds Hackers Breach Microsoft Customer Support to Target its Customers (The Cyber Security News)
Microsoft support agent and some basic customer details hit by SolarWinds attackers (ZDNet)
Microsoft (NASDAQ:MSFT) customers compromised in a cyberattack
Microsoft says new breach discovered in probe of suspected SolarWinds hackers (Regina Leader Post)
Microsoft says new breach discovered in probe of suspected SolarWinds hackers (The Star Phoenix)
SolarWinds hackers attack Microsoft, shocking security analysts (Techzine Europe)
Microsoft says hackers who compromised SolarWinds breached three new victims
Microsoft Discovers New Attacks by SolarWinds Group, Including One Against Its Own Agent - by Cynthia Brumfield (Metacurity)
Microsoft’s customer support targeted by SolarWinds hackers
Russian hackers breached Microsoft customer support to try phishing targets in 36 countries
Microsoft support agent and some basic customer details hit by SolarWinds attackers (ZDNet)
Microsoft Tracks Attack Campaign Against Customer ...
The SolarWinds hackers are attacking again. (Aluria Tech)
Microsoft uncovers new breach while investigating SolarWinds hackers, Digital News (AsiaOne)
Microsoft Signed Malware That Spreads Through Gaming (tpost)
SolarWinds hack: Microsoft says new breach discovered during SolarWinds hack probe (The Economic Times)
Details of basic customers attacked by Microsoft support agents and SolarWinds attackers (Fuentitech)
Nobelium, After SolarWinds, Has Now Hit Microsoft (Cyberintel Magazine)
Denmark's central bank exposed in SolarWinds hack, media report says
Major Danish bank was attacked by SolarWinds (NewsLine)
BreachExchange: SolarWinds hackers breach Microsoft support agent to target customers
Retrieved 2021-06-27
SolarWinds Hackers Accessed Microsoft Customer Service Tools (Teller Report)
SolarWinds hackers break into new victims, including Microsoft support agents (Fuentitech)
Microsoft Says SolarWinds Hackers Attacked Three in New Breach (usnewsmail)
SolarWinds hackers breach new victims, including a Microsoft support agent (HITBSecNews)
Microsoft says its own customer support tools were compromised by SolarWinds hackers (TechNewsBoy.com)
Retrieved 2021-06-26
SolarWinds backdoor gang pwns Microsoft support agent to turn sights on customers (Register)
Microsoft says its own customer support tools were compromised by SolarWinds hackers (Sports Grind Entertainment)
Microsoft reports previously undetected security breach while investigating SolarWinds hack — RT USA News
Microsoft: Russia (linked SolarWinds hackers breached three new entitiesSecurity Affairs)
SolarWinds hackers breach new victims, including a Microsoft support agent (ars)
Microsoft Discloses New Customer Hack Linked to SolarWinds Cyberattackers (WSJ)
Microsoft says new breach discovered in probe of suspected SolarWinds hackers (Netscape Money & Business)
Microsoft claims its own customer support tools have been compromised by SolarWinds hackers – . (FR24 News English)
SolarWinds hackers breach new victims, together with a Microsoft help agent (EAUC News)
SolarWinds Hackers Breach New Victims, Including Microsoft Support Agent (Salesground)
SolarWinds hackers breach new victims, including a Microsoft support agent – Ars Technica (Million Dollar Business Blog)
SolarWinds hackers attack new victims, including Microsoft support agent – . (FR24 News English)
Microsoft admits to signing rootkit malware in supply-chain fiasco (Business Standard News)
Microsoft says a new breach was discovered in a suspected investigation into SolarWinds hackers (India News Republic)
Microsoft Corporation (NASDAQ:MSFT) - Microsoft Says Its Customer Support Tools, Users' Information Were Exploited By The Hackers Behind SolarWinds (Benzinga)
Retrieved 2021-06-25
Microsoft says new breach discovered in probe of suspected SolarWinds hackers (Reuters)
Microsoft says SolarWinds hacking group has breached three new victims (The Record by Recorded Future)
Microsoft says its own customer support tools were compromised by SolarWinds hackers (Verge)
SolarWinds : Cyberattack Generates Recent Widespread SEC Enforcement Requests (MarketScreener)
Retrieved 2021-06-24
SEC “Sweep” of Public Companies’ & Registrants’ Responses to the SolarWinds Cyberbreach (Faegre Drinker Biddle & Reath LLP - JDSupra)
Retrieved 2021-06-23
SolarWinds Cyberattack Generates Recent Widespread SEC Enforcement Requests (Troutman Pepper - JDSupra)
SEC “Sweep” of Public Companies’ & Registrants’ Responses to the SolarWinds Cyberbreach
SEC Reportedly Investigating SolarWinds Disruption (Breaking into - The Rv Article)
Retrieved 2021-06-22
SEC still digging into SolarWinds fallout, nudges undeclared victims (Register)
U.S. SEC probing SolarWinds clients over cyber breach disclosures -sources (Reuters)
World Business Report: Update: US authorities open probe into SolarWinds' cyber breach on Apple Podcasts
Cyber agency says SolarWinds hack could have been deterred by simple security measures
The Cybersecurity 202: Defense contractors are yet another sector highly vulnerable to hacking, study finds (wapo)
US SEC investigates SolarWinds clients over cyber breach disclosures (IT PRO)
Rethinking US Federal network defenses. Mandatory reporting laws. International CyberCrime Prevention Act, RICO, and money laundering.
U.S. SEC has begun probe of cyber breach by SolarWinds – sources
US SEC investigates SolarWinds clients over cyber breach disclosures (The Cyber Security News)
SolarWinds Clients Said to Face US SEC Probe Over Cyberattack Disclosures (News Update)
The US Securities and Exchange Commission is investigating SolarWinds clients for hacking detection - Sources by Reuters (Asia Pacific Live Update)
US SEC Investigates SolarWinds Clients for Cyber Breach: Report (Economy and Business News - Insider Voice)
SolarWinds customers asked to face investigation from US SEC over cyber breach disclosure (Indian Lekhak)
SEC Investigates If Companies Did Not Disclose Effects of SolarWinds Cyber Breach (UK Time News)
SEC Reportedly Probing SolarWinds Breach | Hacking (TechNewsWorld)
Did Companies Fail to Disclose Being Affected by SolarWinds Breach? (The Cyber Post)
Recent SEC Enforcement Requests Related to SolarWinds Cyberattack (Skadden, Arps, Slate, Meagher & Flom LLP - JDSupra)
SEC Reportedly Probing SolarWinds Breach (Hacking - newsbinding)
The SEC is reportedly investigating SolarWinds breaches (Hacking - Fuentitech)
US SEC probing clients of SolarWinds over cyber (breach)
SEC.gov (In the Matter of Certain Cybersecurity-Related Events (HO-14225) FAQs)
Retrieved 2021-06-21
U.S. SEC seeks information from SolarWinds clients in cyber breach probe (Regina Leader Post)
U.S. SEC probing SolarWinds clients over cyber breach disclosures (sources)
SolarWinds’ Breach Disclosures Being Painstakingly Examined by U.S. SEC (Byte News)
US SEC Requests Information from SolarWinds Customers in Cyber Attack Investigation (RB Tech Inc)
Retrieved 2021-06-03
Russian SolarWinds hackers have launched a new campaign using their USAID email address, Microsoft said. (Illinois News Today)
Retrieved 2021-06-01
How SolarWinds Hackers ‘Nobelium’ Used Constant Contact in Mass Phishing Campaign
Russian SolarWinds Hacker Launches New Phishing Campaign-Security (Illinois News Today)
New breach by hackers behind SolarWinds 'mostly unsuccessful', says Microsoft (Secure books)
SolarWinds hackers launch phishing attack - (GCN)
JBS cyber attack: 1/5 of beef production wiped out in massive hack (Axios)
U.S. seizes two domains used in cyberattacks that mimicked USAID communications (Nasdaq)
Meatpacking giant JBS hit by cyberattack; believes Russia involved
SolarWinds Threat Actors Behind New Email Attack Campaign
NobleBaron (New Poisoned Installers Could Be Used In Supply Chain Attacks - SentinelLabs)
Justice Department seizes domains used in Nobelium-USAID phishing campaign (ZDNet)
US seizes 2 domain names used in cyberespionage campaign (The Seattle Times)
Feds seize two domains used by SolarWinds intruders for malware spear (phishing op • The Register)
Cyberattack On World's Biggest Meat Company 'Likely Based In Russia'
SolarWind Attackers Launch New Wave Of Phishing Attacks
US SolarWinds hackers seize domains used in cyber espionage attacks (Jioforme)
U.S. seizes domains used in USAID hack (UPI)
will over solarwinds latest massive phishing
Russia's Nobelium uses USAID's email system for hacking, according to Microsoft (Illinois News Today)
FireEye CEO: 'We are getting sucker (punched in cyberspace')
What Microsoft officials know about Russian phishing hacks aimed at USAID (Illinois News Today)
Retrieved 2021-05-31
Implications Of Russian Solarwinds Hackers New Email Attack On Government Agencies (Information Security Buzz)
SolarWinds Hackers Return, Launch Phishing Campaign Using Compromised Account of US Foreign Aid Agency (CPO Magazine)
Another Nobelium Cyberattack (Microsoft On the Issues)
Solarwinds: 150 companies massively targeted by APT29
Nobelium: The SolarWinds Hackers is Back With Another Cyber Attack (secblvd)
Russian hackers of SolarWinds back on the attack
New Wave of Phishing Attacks: SolarWinds Hackers Target Government and NGOs
SolarWinds Attackers Launch New Wave Of Nobelium Attacks - Malware News (Malware Analysis, News and Indicators)
Retrieved 2021-05-28
Microsoft Says SolarWinds Hackers Are Back, USAID Breached
SolarWinds attacker Nobelium targets almost 3,000 emails (ARN)
Microsoft Catches NOBELIUM's Email Malware Plans, Also Known for its Part in SolarWinds' Attack (Tech Times)
Microsoft: SolarWinds hackers target 150 orgs with phishing
SolarWinds hack: Microsoft says SolarWinds hackers now targeting US agencies, NGOs (The Economic Times)
Microsoft says group behind SolarWinds hack now targeting government agencies, NGOs (Reuters)
Microsoft: SolarWinds hackers target 150 orgs with phishing | Govt. & Politics (yorknewstimes.com)
Russian gang behind SolarWinds hack returns with phishing attack disguised as mail from US aid agency (Register)
SolarWinds hackers are at it again, targeting 150 organizations, Microsoft warns
Microsoft says group behind SolarWinds hack now targetting government agencies, NGOs (Regina Leader Post)
Microsoft says SolarWinds hackers have struck again at the US and other countries (CNN)
MSFT warns group behind SolarWinds cyberattack's returned to target over 150 organizations
Russian Hackers Of SolarWinds Back On The Attack
SolarWinds hackers using NativeZone backdoor against 24 countries
Kremlin says has no information on U.S. cyber attack, directs questions to Microsoft (The Star Phoenix)
SolarWinds attacker Nobelium targets over 150 companies in new mass email campaign (CSO Online)
Hackers are using Trump’s election fraud conspiracy to break into U.S. government agencies
Microsoft warns that Russian hackers used US agency to mount huge cyberattack (CNET)
Retrieved 2021-05-27
New sophisticated email-based attack from NOBELIUM (MS Security)
Retrieved 2021-05-25
SolarWinds hack 'a big wakeup call,' NASA's human spaceflight chief says (Space)
Retrieved 2021-05-21
Veterans Affairs says no evidence of data loss from SolarWinds hack (FRN)
VA found ‘no evidence’ of compromise in SolarWinds hack: CISO Cunningham
Retrieved 2021-05-18
Nearly 40 defense companies were impacted in SolarWinds breach (FedScoop)
Retrieved 2021-05-10
SolarWinds Shares More Information on Cyberattack Impact, Initial Access Vector (SecurityWeek.Com)
Retrieved 2021-05-07
SolarWinds Believes Russian Group Took Data During Cyber-Attack (Bloomberg)
Retrieved 2021-04-30
NYDFS Issues Report on SolarWinds (Robinson+Cole Data Privacy + Security Insider - JDSupra)
Biden Order To Require New Cybersecurity Standards In Response To SolarWinds Attack (Georgia Public Broadcasting)
NYDFS Issues Report on the SolarWinds Attack and Covered Entities’ Responses (Alston & Bird - JDSupra)
Retrieved 2021-04-29
New York State Department of Financial Services Releases Report on SolarWinds Cyber Espionage Attack
NYDFS Issues Report on SolarWinds Response and Recommends Critical Cybersecurity Measures (Practical Law)
NYDFS Issues Report on the SolarWinds Attack and Covered Entities’ Responses (Alston & Bird Privacy, Cyber & Data Strategy Blog)
Retrieved 2021-04-28
New York Warns of Supply Chain Attack Dangers in Recent SolarWinds Report
In Wake of Recent Breaches, FAA Wants to Up Cybersecurity of National Airspace System (Nextgov)
New York: NYDFS issues report on investigation of SolarWinds cyberattack | News post (DataGuidance)
Retrieved 2021-04-27
Cybersecurity roundup: U.S. agencies warn of Russian hacks, Australian hospitals struggle to get back online (Healthcare IT News)
Retrieved 2021-04-25
http.title:solarwinds http.favicon.hash:-1776962843 (Shodan Search)
Retrieved 2021-04-22
SolarWinds juggles stakeholders involved in response, recovery to level out business (Cybersecurity Dive)
New analysis uncovers extensive SolarWinds attack infrastructure (TechRadar)
Retrieved 2021-04-20
5 signs a trucking company has been hacked (Commercial Carrier Journal)
Retrieved 2021-04-17
Utility Regulator Says SolarWinds Backdoor Was Downloaded by 1/4 of Electric Utilities on the North American Power Grid (CPO Magazine)
Retrieved 2021-04-16
SolarWinds hack affected six EU agencies (The Record by Recorded Future)
SolarWinds compromise attributed to Russian state actor (Beehive.govt.nz)
6 out of 11 EU agencies running Solarwinds Orion software were hackedSecurity Affairs
Retrieved 2021-04-15
Lesson From SolarWinds: Cyberattacks Have a Lingering Impact (IndustryWeek)
If 25% of US utilities downloaded the malicious SolarWinds software, could the grid go down Ukraine-style? (Power Engineering)
SolarWinds Fallout: Are the Feds to Blame? (EE Times)
Retrieved 2021-04-14
NERC Says 375 Electricity Providers Installed the Laced SolarWinds Update (TechNadu)
Protecting The Integrity Of The Software Factory
Cyber Cartels Are Committing Modern Bank Heists (Barron's)
NERC finding 25% of utilities exposed to SolarWinds hack indicates growing ICS vulnerabilities, analysts say (Utility Dive)
Pentagon believes it escaped unscathed from SolarWinds, Microsoft hacks (FRN)
Retrieved 2021-04-13
Former DHS Leader Shares Details on SolarWinds Attack
Hundreds of electric utilities downloaded SolarWinds backdoor, regulator says (CyberScoop)
Retrieved 2021-04-12
City of Tampa among 18,000 targets of SolarWinds hack; exposing government data, personal info - Tampa, Florida (Eminetra)
Former DHS Secretary Details SolarWinds Hackers’ Access to His Email (Nextgov)
Ex-DHS chief confirms suspected Russian hackers targeted his email account (CyberScoop)
‘They knew I was running late to meetings’: Former DHS chief on reports that SolarWinds hackers targeted his emails (The Record by Recorded Future)
Retrieved 2021-04-06
Top Homeland Security Senators Want Details on Agencies Hit in SolarWinds, Microsoft Intrusions (Nextgov)
Retrieved 2021-04-05
Supply Chain Hackers Strike Hard at Government Entities
European Institutions Were Targeted in a Cyber-Attack Last Week (BNN Bloomberg)
Retrieved 2021-04-02
DOE Watchdog Detailed Its Cybersecurity State Amid SolarWinds Hack (Nextgov)
Retrieved 2021-04-01
Top DHS Officials’ E-Mails Compromised in SolarWinds Hack, (Saudi Press)
SolarWinds Hack Obtained Emails of Top U.S. Department of Homeland Security Officials (FISM TV)
SolarWinds Hackers Accessed US Department of Homeland Security (DHS) officials
Hunting the hunters: How Russian hackers targeted US cyber first (KAKE)
Russian SolarWinds hackers were so ‘sophisticated’ that they even targeted DHS cybersecurity experts (Alternet.org)
Hunting the hunters: How Russian hackers targeted US cyber first responders in SolarWinds breach
Retrieved 2021-03-31
SolarWinds cyberhack gained access to then-acting DHS chief's emails: Sources (ABC News)
News Briefs | (bedfordgazette.com)
Hillicon Valley: Officials say cyber executive order with 'a dozen' actions forthcoming | Epic Games submits Apple complaint to UK watchdog | Facebook's chief revenue officer to leave company (hill)
Russia suspected of stealing thousands of State Department emails
SolarWinds hacker accessed Homeland Security email (Texas News Today)
Email accounts of DHS members were compromised in the SolarWinds hackSecurity Affairs
SolarWinds Hack Affected Emails Of Homeland Security Leaders (Potomac Officers Club)
Russians suspected of 'stealing thousands of State Department emails' in latest hack targeting US (Daily Mail Online)
SolarWinds surprise: Department of Homeland Security emails leaked?
SolarWinds hacker sneaks into Trump's top executive email (Texas News Today)
Retrieved 2021-03-30
SolarWinds Attackers Accessed DHS Emails, Report (tpost)
Head of Homeland Security had his email hacked in SolarWinds attack (IT PRO)
SolarWinds Hackers Said to Have Accessed Emails of Top US Security Officials (NewsDeal)
AP report: SolarWinds hack obtained emails of top DHS officials (Techzine Europe)
Department of Homeland Security email accounts exposed in SolarWinds hack (Cyber Security Review)
Retrieved 2021-03-29
AP sources: SolarWinds hack got emails of top DHS officials (StarTribune)
AP Sources: SolarWinds Hack Got Emails of Top DHS Officials (NBC10 Philadelphia)
SolarWinds hack obtained emails of top US Department of Homeland Security officials (AP)
'Small number' of DHS email accounts accessed during SolarWinds breach (FedScoop)
Associated Press: SolarWinds hack got emails of top DHS officials (KyivPost - Ukraine's Global Voice)
AP sources: SolarWinds hack got emails of top DHS officials | Govt-and-politics (tulsaworld.com)
SolarWinds Hackers Breached Homeland Security Officials Emails: Report
Solarwinds, Inc. (NYSE:SWI), (CRWD) - SolarWinds Hackers Breached Homeland Security Officials Emails: Report (Benzinga)
SolarWinds hack obtained emails of top U.S. Department of Homeland Security officials: AP (Reuters)
Russian hackers stole thousands of State Department emails, reports claim (The Independent)
The Emails of the Department of Homeland Security exposed
SolarWinds cyberhack gained access to then (acting DHS chief’s emails: Sources – Illinois News Now)
AP sources: SolarWinds hack got emails of top DHS officials
Retrieved 2021-03-28
AP sources: SolarWinds hack got emails of top DHS officials (WTMJ)
AP sources: SolarWinds hack got emails of top DHS officials (ConchoValleyHomepage.com)
Retrieved 2021-03-26
Mimecast’s Forensic Investigation Found That SolarWinds Hackers Copied Limited Number of Source Code Repositories (CPO Magazine)
Retrieved 2021-03-25
Agency Dealing With US Nuclear Reserves Hacked In SolarWinds Hack
Retrieved 2021-03-23
Exchange Server updates. SolarWinds victim list "solidified." AFCEA and Shell disclose third (party breaches. MangaDex down.)
Acting CISA Director Considers List Of SolarWinds Victims To Be Complete (Potomac Officers Club)
Retrieved 2021-03-22
CISA head: Group of SolarWinds victims is 'solidified' - (FCW)
US government calls for better information sharing in wake of SolarWinds, Exchange attacks (CSO Online)
SilverFish: Swiss researchers identify threat actor with links to SolarWinds hack
Retrieved 2021-03-19
Congress gives four agencies 10 days to report on SolarWinds damage (FRN)
Interview: Sai Venkataraman, Co-Founder and CEO, SecurityAdvisor (Infosecurity Magazine)
Here's what Chinese and Russian hackers are doing in Americans' emails
SolarWinds-linked hacking group SilverFish abuses enterprise victims for sandbox tests (Cyber Security Review)
[Security Weekly] Mimecast Source Code Stolen by Hackers Exploiting SolarWinds Sunburst Backdoor (Penta Security Systems Inc.)
Government Monitoring Won't Stop the Next SolarWinds Campaign, Experts Say (Zero Day)
Retrieved 2021-03-18
Mimecast reveals source code theft in SolarWinds hack (ZDNet)
SolarWinds attackers stole Mimecast source code (IT Security Guru)
Source code for Mimecast stolen for SolarWinds breach (Texas News Today)
SolarWinds hackers stole Mimecast source code
Mimecast releases report on SolarWinds security incident investigation | 2021-03-18 (Security Magazine)
Mimecast's source code stolen in SolarWinds breach
Has Your Organization Been Breached By Solar Winds Malware?
SolarWinds hackers stole source code from email security firm Mimecast
SolarWinds hackers gain access to Mimecast production grid environment (PG-Intel)
SolarWinds-linked hacking group SilverFish abuses enterprise victims for sandbox tests (ZDNet)
Retrieved 2021-03-17
Suspected Chinese hackers used SolarWinds bug to spy on US payroll agency (sources)
SolarWinds hackers stole some of Mimecast source code (RedPacket Security)
Mimecast Finds SolarWinds Hackers Stole Some of Its Source Code
Mimecast Update: SolarWinds Hackers Stole Source Code
Mimecast: SolarWinds Attackers Stole Source Code (tpost)
Mimecast confirms hackers behind SolarWinds supply chain attack accessed limited amount of customer information (The Daily Swig)
SolarWinds Attackers Accessed Mimecast Source Code (Decipher)
Mimecast Says SolarWinds Attackers Accessed its ...
SolarWinds hackers gain access to Mimecast production grid environment
Mimecast Finds SolarWinds Hackers Stole Some of Its Source Code
Mimecast Discovers That Solarwinds Hackers Stole Some of Their Source Code (TheDigitalHacker)
Mimecast Says SolarWinds Hackers Stole Source Code (SecurityWeek.Com)
SolarWinds (Linked Attackers Target Microsoft 365 ...)
Retrieved 2021-03-13
Why ‘blaming the intern’ won’t save startups from cybersecurity liability – TechCrunch (Bestgamingpro)
Retrieved 2021-03-12
Biden administration to respond in weeks to SolarWinds hackers-senior official | The Mighty 790 KFGO (KFGO)
Retaliation Options: US Cyber Responses To SolarWinds, Exchange Hacks « Breaking Defense (Defense industry news, analysis and commentary)
U.S. government to respond to SolarWinds hackers in weeks: senior official
How Should the U.S. Respond to the SolarWinds and Microsoft Exchange Hacks? (Lawfare)
Retrieved 2021-03-11
Why embedded devices are the dangerous blind spot in the SolarWinds attack (hill)
Retrieved 2021-03-10
Cyber Command: ‘No evidence’ that SolarWinds attackers compromised DoD networks (The Record by Recorded Future)
Nevada CIO says state’s IT is 8 years behind others’ (StateScoop)
Retrieved 2021-03-09
The SolarWinds Hack Hits Home (DevPro Journal)
Retrieved 2021-03-08
Casting a wide intrusion net: Dozens burned with single hack | (leadertelegram.com)
Latest target for hackers: A popular file-transfer program (WRAL TechWire)
China (linked hackers exploited SolarWinds software in 2020 breach, researchers say)
Retrieved 2021-03-07
Casting a wide intrusion net: Dozens burned with single hack (StarTribune)
Retrieved 2021-03-05
SolarWinds: "IT's Pearl Harbor." (InsiderPro)
SolarWinds SUNBURST Backdoor DGA and Infected Domain Analysis (Cybersecurity Insiders)
Retrieved 2021-03-04
SolarWinds hack a wake-up call to the tech sector (GZERO Media)
Retrieved 2021-03-03
SolarWinds Incident May Bring Data Breach Notification Rules
SolarWinds Hackers Obtained Emails of Top US Department of Homeland Security Officials (Cyberintel Magazine)
Retrieved 2021-03-02
SolarWinds Attack Prompts Calls for Companies to Disclose Hacks (Bloomberg)
Retrieved 2021-03-01
Incident Response to SolarWinds Orion Software Compromise for SMEs
The SolarWinds Body Count Now Includes NASA and the FAA (WIRED)
Retrieved 2021-02-28
Hackers seized on the pandemic. Some states are fighting back | National (bakersfield.com)
‘The Marriage Pact’ and the risks we take with data (Charlotte Observer)
Retrieved 2021-02-27
The SolarWinds Body Count Now Includes NASA and the FAA (WIRED)
The SolarWinds Body Count Now Includes NASA and the FAA (Tech Exec)
Retrieved 2021-02-26
It’s Not Such a Breeze: Assessing Your Service Providers After SolarWinds (New York Law Journal)
U.S. Government Cybersecurity Vulnerabilities Flow Down to Private Companies and Federal Court Litigants (New York Law Journal)
Former SolarWinds CEO blames intern for 'solarwinds123' password leak | (foxcarolina.com)
Retrieved 2021-02-25
SolarWinds hackers targeted NASA, Federal Aviation Administration networks
The massive Solarwinds attack is still shrouded in mystery
SolarWinds Update: Russian Threat-Actor Re (Used Components from Other)
Retrieved 2021-02-24
'Russian' hackers targeted NASA as part of SolarWinds attack (MENAFN.COM)
SolarWinds Attackers Lurked for 'Several Months' in ...
More SolarWinds Hack Victims Yet to Be Publicly Identified, Tech Executives Say (WSJ)
SolarWinds & Solorigate: What Happened, Why it Matters & What Happens Next (The Devolutions Blog)
Retrieved 2021-02-23
Health care bore brunt of cyberattacks in 2020, study says (Roll Call)
After SolarWinds hack, the U.S. must prioritize cybersecurity (Idaho Business Review)
SolarWinds Hack Grabs Senate Spotlight With CEO in the Hot Seat (Bloomberg)
SolarWinds hackers targeted NASA, Federal Aviation Administration networks (TechCrunch)
Microsoft says it notified 60 customers of SolarWinds breach (U.S. Senate panel hearing)
SolarWinds, Microsoft, FireEye, CrowdStrike executives face U.S. Senate grilling (Nasdaq)
US to sanction Russia for mass hack, Navalny poisoning
Palo Alto Networks Posts First $1 Billion Sales Quarter (DCN)
The Compromise of SolarWinds Orion
Retrieved 2021-02-18
Norway’s 11179 billion NOK wealth fund affected by the SolarWinds hack (DN)
White House now says 100 companies hit by SolarWinds hack, but more may be impacted (Verge)
SolarWinds attack hit 100 companies and took months of planning, says White House (ZDNet)
White House Prepping Multi-Part Executive Order on SolarWinds Hack (Defense One)
Retrieved 2021-02-17
Suspected Russian Hackers Used U.S. Networks, Official Says (Bloomberg)
Thread by @NatashaBertrand on Thread Reader App (Thread Reader App)
SolarWinds Hacked From Inside U.S., 100+ Orgs Compromised
Retrieved 2021-02-16
SolarWinds: Microsoft Reveals New Details About Sophisticated Mega (Breach)
Retrieved 2021-02-15
France Ties Russia's Sandworm to a Multiyear Hacking Spree (WIRED)
Microsoft: SolarWinds attack took more than 1,000 engineers to create (ZDNet)
Many SolarWinds Customers Failed to Secure Systems Following Hack (SecurityWeek.Com)
Microsoft: SolarWinds hack was 'largest and most sophisticated attack' ever: Microsoft president Brad Smith, Telecom News, ET Telecom
Retrieved 2021-02-12
US Court system demands massive changes to court documents after SolarWinds hack (TechRepublic)
Retrieved 2021-02-11
White House Names SolarWinds Response Leader Amid Criticism (SecurityWeek.Com)
Retrieved 2021-02-10
Supply chain security is actually worse than we think (ZDNet)
Retrieved 2021-02-09
SolarWinds Shines Spotlight on Supply Chain Risks (CSO Online)
Retrieved 2021-02-08
SolarWinds Fallout: Practices to strengthen data protection - (GCN)
After SolarWinds Attack, Courts Revert to Paper for Secrets
Retrieved 2021-02-05
SolarWinds fallout could last for years, as power industry secures vulnerable equipment: Dragos CEO (Utility Dive)
Retrieved 2021-02-03
3 New Severe Security Vulnerabilities Found In SolarWinds Software
Second SolarWinds Attack Group Breaks into USDA Payroll — Report (tpost)
‘Severe’ SolarWinds Vulnerabilities Allow Hackers To Take Over Servers
Nearly One (Third of Attack Targets Weren’t Running SolarWinds)
Retrieved 2021-02-02
Hackers Lurked in SolarWinds Email System for at Least 9 Months, CEO Says (WSJ)
US payroll agency targeted by Chinese hackers: report (hill)
Exclusive: Suspected Chinese hackers used SolarWinds bug to spy on U.S. payroll agency – sources (Reuters)
Retrieved 2021-02-01
SolarWinds Hackers Cast a Wide Net (BankInfoSecurity)
Retrieved 2021-01-31
Russian hack brings changes, uncertainty to US court system
Retrieved 2021-01-29
Suspected Russian Hack Extends Far Beyond SolarWinds Software, Investigators Say (WSJ)
Manufacturing particularly at risk of Solorigate (linked breaches)
SolarWinds attack is not an outlier, but a moment of reckoning for security industry, says Microsoft exec (ZDNet)
Retrieved 2021-01-28
SolarWinds Hackers Hit Qualys, Other Cybersecurity Vendors (SDxCentral)
Retrieved 2021-01-27
Fidelis Targeted By SolarWinds Hackers After Installing Orion
Retrieved 2021-01-26
Ongoing Analysis of SolarWinds Impacts (Fidelis Cybersecurity)
Retrieved 2021-01-25
5 Security Vendors That Have Reported Cyberattacks Since December
Retrieved 2021-01-19
Malwarebytes said it was hacked by the same group who breached SolarWinds (ZDNet)
Malwarebytes targeted by Nation State Actor implicated in SolarWinds breach. Evidence suggests abuse of privileged access to Microsoft Office 365 and Azure environments - Malwarebytes Labs (Malwarebytes Labs)
SolarWinds Hackers Also Breached Malwarebytes Cybersecurity Firm
SolarWinds Attack Underscores 'New Dimension' in ...
SolarWinds: 9 federal agencies and about 100 companies hit by SolarWinds hack: The White House, Telecom News, ET Telecom
Retrieved 2021-01-18
Google Cloud: We do use some SolarWinds, but we weren't affected by mega hack (ZDNet)
Retrieved 2021-01-16
American Public Reticent to Retaliate Against SolarWinds Hack (The National Interest)
Retrieved 2021-01-15
DoJ confirms email accounts breached by SolarWinds hackers | Hacking (Guardian)
Some UW Campuses That Contract With SolarWinds IT Provider Exploited In National Cyberattack (Wisconsin Public Radio)
Retrieved 2021-01-14
SolarWinds CEO: Company Might Not Be the Only Compromise (My TechDecisions)
Retrieved 2021-01-13
Mimecast compromised by a threat actor | 2021-01-13 (Security Magazine)
Expect more SolarWinds victims, national security official says - (GCN)
Mimecast breach investigators probe possible SolarWinds connection (CyberScoop)
Retrieved 2021-01-12
Evanina: Number of known SolarWinds victims 'will continue to grow' - (FCW)
SolarWinds Hackers’ Attack on Email Security Company Raises New Red Flags (WSJ)
5 Things To Know About The Mimecast Hack And Stock Drop
Email Security Firm Mimecast Says Hackers Hijacked Its Products to Spy on Customers | Technology News (US News)
Retrieved 2021-01-11
Hackers Didn’t Only Use SolarWinds to Break In, Says CISA (secblvd)
More federal victims of SolarWinds hacking likely to come forward, CISA chief says
Retrieved 2021-01-09
SolarWinds Malware Arsenal Widens with Raindrop (tpost)
Retrieved 2021-01-08
solarwinds customers
Sealed U.S. court records possibly accessed by SolarWinds attackers (Help Net Security)
Retrieved 2021-01-07
Sealed U.S. Court Records Exposed in SolarWinds Breach — Krebs on Security
The Cybersecurity 202: Riot in the Capitol is a nightmare scenario for cybersecurity professionals (wapo)
SolarWinds Hackers Compromise Confidential Court Filings
Retrieved 2021-01-06
Justice Department also hit by Russian hackers (wapo)
SolarWinds Hack Breached Justice Department System (WSJ)
DOJ says it was hit by SolarWinds hackers - (FCW)
Retrieved 2021-01-05
Severe SolarWinds Hacking: 250 Organizations Affected?
Researchers say cloud deployments of SolarWinds Orion could put API keys at risk (IT World Canada)
Retrieved 2021-01-04
Solar Winds Blow Hard (secblvd)
SolarWinds hack may have been a global attack (TechRadar)
Treasury Finds no Evidence of Tax Data Breach in SolarWinds Hack (MeriTalk)
SolarWinds breach could reshape cybersecurity practices
Microsoft downplays threat after admitting SolarWinds attackers accessed source code (The Daily Swig)
Retrieved 2021-01-03
SolarWinds hack may be bigger than previously believed (SiliconANGLE)
Retrieved 2020-12-31
Microsoft Hacked in Russia-Linked SolarWinds Cyberattack (WSJ)
Retrieved 2020-12-29
National cyber director role in the spotlight after SolarWinds hack
Retrieved 2020-12-24
Suspected Russian hackers used Microsoft vendors to breach customers (Reuters)
SolarWinds Hack Infected Critical Infrastructure
Here's a simple explanation of the SolarWinds hack (BI)
Hack of Federal Agencies Shows Cyber Dangers to Supply Chains (WSJ)
Suspected Russian hackers used Microsoft vendors to breach customers (Reuters)
Retrieved 2020-12-23
Syxsense Confirms There is Zero SolarWinds® Orion® in its Environment and is Not a SolarWinds Customer
Experts say SolarWinds hack could impact Kern County businesses
The Facts and Mysteries About Russia’s Hack of the U.S.
Massive data breach may have been discovered due to 'unforced error' by suspected Russian hackers (CNNPolitics)
List of Known SolarWinds Breach Victims Grows, as Do Attack Vectors
Grid regulator warns utilities of risk of SolarWinds backdoor, asks how exposed they are (CyberScoop)
Five Solution Providers Breached By SolarWinds Hackers: Researchers
'No evidence' IRS taxpayer information exposed by SolarWinds hack (FedScoop)
Retrieved 2020-12-22
SolarWinds victims revealed after cracking the Sunburst malware DGA
HPE: ‘No Evidence’ It Has Been ‘Impacted’ By SolarWinds (Based Attack)
Qualys Researchers Identify 7+ Million Vulnerabilities Associated with SolarWinds/FireEye Breach by Analyzing Anonymized Vulnerabilities across Worldwide Customer Base (secblvd)
Florida Investigating Server Hacking Through SolarWinds Software
Coast Guard releases bulletin on SolarWinds hack (WorkBoat)
Cyberattack Hit Key US Treasury Systems: Senator (SecurityWeek.Com)
Retrieved 2020-12-21
SolarWinds Hack Victims: From Tech Companies to a Hospital and University (WSJ)
Kevin Mandia: 50 Firms ‘Genuinely Impacted’ By SolarWinds Attack
SolarWinds/SUNBURST Backdoor, Third-Party and Supply Chain Security (secblvd)
All about the suspected Russian cyberattack that Microsoft has called ‘moment of reckoning’
Russian Hacking Targeted Treasury Department’s Senior Leaders (nyt)
Partial lists of organizations infected with Sunburst malware released online (ZDNet)
SolarWinds Hack Hit Office Home to Top Treasury Department Officials (WSJ)
Big tech companies including Intel, Nvidia, and Cisco were all infected during the SolarWinds hack (Verge)
Retrieved 2020-12-20
SolarWinds Hack Could Affect 18K Customers — Krebs on Security
Retrieved 2020-12-19
SolarWinds Hack: Cisco And Equifax Amongst Corporate Giants Finding Malware... But No Sign Of Russian Spies
At Least 200 Victims Identified in Suspected Russian Hacking (Bloomberg)
Retrieved 2020-12-18
OODA Loop (Microsoft says it found malicious software in its systems)
Hackers last year conducted a 'dry run' of SolarWinds breach
Microsoft identifies more than 40 organizations targeted in massive cyber breach (CNNPolitics)
US cyber-attack: Cybersecurity agency warns suspected Russian hacking campaign broader than previously believed (CNNPolitics)
SolarWinds hackers broke into U.S. cable firm and Arizona county, web records show (Reuters)
Tech Tent: Hacking the heart of the US government (BBC News)
SolarWinds: UK assessing impact of hacking campaign (BBC News)
US cyber-attack: US energy department confirms it was hit by Sunburst hack (BBC News)
Industry Letter - December 18, 2020: Supply Chain Compromise Alert (Department of Financial Services)
Cisco Hacked Through SolarWinds As Tech Casualties Mount
DOE confirms its systems were compromised by SolarWinds hack (Utility Dive)
DATA443 RELEASES STATEMENT ON FIREEYE AND SOLARWINDS HACK AND BREACH OTC Markets:ATDS
DOE Update on Cyber Incident Related to Solar Winds Compromise (DOE)
"Strategic Silence" and State (Sponsored Hacking: The US Gov't and SolarWinds)
'Very, very large' telecom organization and Fortune 500 company breached in SolarWinds hack (scmedia)
Sunburst's C2 Secrets Reveal Second-Stage SolarWinds Victims (tpost)
40 Of Microsoft's Customers Impacted By SolarWinds Hack : NPR
Sunburst: connecting the dots in the DNS requests (Securelist)
Microsoft warns UK companies were targeted by SolarWinds hackers
Microsoft says it found malicious software in its systems (CNA)
Microsoft falls prey to SolarWinds supply chain cyber-attacks (The Daily Swig)
Retrieved 2020-12-17
SolarWinds’ Customers (Pastebin)
Federal investigators find evidence of previously unknown tactics used to penetrate government networks (wapo)
Exclusive-Suspected Russian hacking spree reached into Microsoft -sources (Reuters)
Nuclear weapons agency breached amid massive cyber onslaught (POLITICO)
Microsoft says it was hit in SolarWinds attack, but customer data safe (BI)
Microsoft identifies more than 40 organizations targeted in massive cyber breach (CNNPolitics)
Russian Hackers Have Been Inside Austin Network for Months
SolarWinds hackers breach US nuclear weapons agency
More Hacking Attacks Found, Officials Warn of Risk to U.S. Government (nyt)
Senators Ask IRS Whether Taxpayer Data Hit in SolarWinds Hack (Bloomberg)
Senators Press IRS for SolarWinds Hack Briefing (WSJ)
Hackers Tied to Russia Hit Nuclear Agency; Microsoft Is Exposed (Bloomberg)
Microsoft president sounds alarm on ‘ongoing’ SolarWinds hack, identifies 40 more precise targets (Verge)
Retrieved 2020-12-16
SUNBURST – SolarWinds® Orion® IT Management Platform Security Advisory (ServerCentral Turing Group)
Hack May Have Exposed Deep US Secrets; Damage Yet Unknown (SecurityWeek.Com)
DOD has a leg up in mitigating potential SolarWinds breach, former officials say (FedScoop)
Opinion (I Was the Homeland Security Adviser to Trump. We’re Being Hacked. - The New York Times)
U.S. Agencies Exposed in Attack by Suspected Russian Hackers (Bloomberg)
Federal Agencies, Think Tank Targeted in Russian Hacking Spree
FireEye and SolarWinds Cyber Attack Information for Exabeam Customers and Partners
Sunburst: Supply Chain Attack Targets SolarWinds Users (Symantec Blogs)
Retrieved 2020-12-15
SolarWinds Orion: More US government agencies hacked (BBC News)
Was my workplace hit by SolarWinds hack? FAQ answers. (trib)
Retrieved 2020-12-14
~18,000 organizations downloaded backdoor planted by Cozy Bear hackers (ars)
'Massively disruptive' cyber crisis engulfs multiple agencies (POLITICO)
DHS Among Those Hit in Sophisticated Cyberattack by Foreign Adversaries – Report (tpost)
DHS, State and NIH join list of federal agencies — now five — hacked in major Russian cyberespionage campaign (wapo)
US Treasury and commerce department targeted in cyber-attack (BBC News)
10 Things To Know About The SolarWinds Breach And Its U.S. Government Impact
SolarWinds Breach: An RSAC Interview with Dmitri Alperovitch About Who, How and Why (RSA)
Alleged Russian Malware Hack Hit Local Governments In U.S., Officials Say : NPR
The SolarWinds Breach: Why Your Work Computers Are Down Today (Lawfare)
SolarWinds hack: US officials scramble to deal with suspected Russian hack of government agencies (CNNPolitics)
Scope of Russian Hacking Becomes Clear: Multiple U.S. Agencies Were Hit (nyt)
U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise — Krebs on Security
DHS, DOJ And DOD Are All Customers Of SolarWinds Orion, The Source Of The Huge US Government Hack
US govt, FireEye breached after SolarWinds supply (chain attack)
SEC filings: SolarWinds says 18,000 customers were impacted by recent hack (ZDNet)
NCSC statement on FireEye incident (NCSC.GOV.UK)
Retrieved 2020-12-13
Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor (fireeye)
Suspected Russian hackers spied on U.S. Treasury emails - sources (Reuters)
US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor
REFILE-EXCLUSIVE-U.S. Treasury breached by hackers backed by foreign government - sources (Reuters)
Russian government (backed hackers breached the U.S. Treasury)
Treasury, Commerce, Others Hacked by Russian Government Spies, Report (Rolling Stone)
Retrieved 2020-12-12
Researchers shared the lists of victims of Solarwinds hack
Retrieved 2020-12-09
Cybersecurity giant FireEye says it was hacked by govt-backed spies who stole its crown (jewels hacking tools • The Register)
Retrieved 2020-12-08
FireEye reveals that it was hacked by a nation state APT group
U.S. Cyber Firm FireEye Says It Was Breached by Nation-State Hackers (WSJ)