Biden budget sets aside $750 million for SolarWinds response
3 years, 6 months ago

Biden budget sets aside $750 million for SolarWinds response

The Hindu  

U.S. President Joe Biden's proposed budget includes $750 million for the government agencies hit by the SolarWinds hack to pay for cybersecurity improvements to prevent another attack. The money comes on top of a $500 million fund for federal cybersecurity as the U.S. government recovers from the cyber attack that hit nine agencies including the State Department and Treasury. The hack of information technology company SolarWinds, which was identified in December, gave access to thousands of companies and government offices that used its products. The group behind the SolarWinds cyber attack identified late last year is now targeting government agencies, think tanks, consultants, and non-governmental organisations, Microsoft said on Thursday.

Attack Biden Solarwinds  identified  microsoft  attack  agencies  response  750  cybersecurity  solarwinds  aside  biden  hit  budget  subscribe  sets  million  president

History of this topic

US regulators sue SolarWinds and its security chief for alleged cyber neglect ahead of Russian hack
1 year, 1 month ago

US regulators sue SolarWinds and its security chief for alleged cyber neglect ahead of Russian hack

Associated Press  

U.S. regulators on Monday sued SolarWinds, a Texas-based technology company whose software was breached in a massive 2020 Russian cyberespionage campaign, for fraud for failing to disclose security deficiencies ahead of the stunning hack. In the 68-page complaint filed in New York federal court, the SEC says SolarWinds and its then vice president of security, Tim Brown, defrauded investors and …

Microsoft: Russian-backed hackers targeting cloud services
3 years, 1 month ago

Microsoft: Russian-backed hackers targeting cloud services

Associated Press  

RICHMOND, Va. — Microsoft said Monday the same Russia-backed hackers responsible for the 2020 SolarWinds breach continue to attack the global technology supply chain and have been relentlessly targeting cloud service companies and others since summer. The group, which Microsoft calls Nobelium, has employed a new strategy to piggyback on the direct access that cloud service resellers have to their …

The Russian hacker group behind the SolarWinds attack is at it again, Microsoft says
3 years, 2 months ago

The Russian hacker group behind the SolarWinds attack is at it again, Microsoft says

NPR  

The Russian hacker group behind the SolarWinds attack is at it again, Microsoft says Enlarge this image toggle caption Suzanne Cordeiro/AFP via Getty Images Suzanne Cordeiro/AFP via Getty Images Last year a hacker group used a bit of malicious code it hid in a software update by the company SolarWinds to launch an immense cyberattack against U.S. government agencies and …

Microsoft: Russia behind 58% of detected state-backed hacks
3 years, 2 months ago

Microsoft: Russia behind 58% of detected state-backed hacks

The Hindu  

Russia accounted for most state- The devastating effectiveness of the long-undetected SolarWinds hack — it mainly breached information technology businesses including Microsoft — also boosted Russian state-backed hackers’ success rate to 32% in the year ending June 30, compared with 21% in the preceding 12 months. China, meanwhile, accounted for fewer than 1 in 10 of the state-backed hacking attempts …

Microsoft says new breach discovered in probe of suspected SolarWinds hackers
3 years, 5 months ago

Microsoft says new breach discovered in probe of suspected SolarWinds hackers

The Hindu  

Microsoft said on Friday an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers. "A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions," the warning reads in part. After commenting on a broader …

Microsoft: SolarWinds hackers target 150 orgs with phishing
3 years, 6 months ago

Microsoft: SolarWinds hackers target 150 orgs with phishing

Associated Press  

BOSTON — The state-backed Russian cyber spies behind the SolarWinds hacking campaign launched a targeted spear-phishing assault on U.S. and foreign government agencies and think tanks this week using an email marketing account of the U.S. Agency for International Development, Microsoft says. The effort targeted about 3,000 email accounts at more than 150 different organizations, at least a quarter of …

Russian hack targeted USAID, human rights groups, Microsoft says
3 years, 6 months ago

Russian hack targeted USAID, human rights groups, Microsoft says

Al Jazeera  

Tech giant’s corporate vice president says a quarter of those targeted were involved in development, human rights and humanitarian work. Russian hackers behind the SolarWinds cyberattack, a huge campaign that saw the widespread hacking of several United States federal agencies, have launched a new round of attacks targeting “government agencies, think tanks, consultants, and non-governmental organizations”, according to Microsoft. This …

Biden Order To Require New Cybersecurity Standards In Response To SolarWinds Attack
3 years, 7 months ago

Biden Order To Require New Cybersecurity Standards In Response To SolarWinds Attack

NPR  

Biden Order To Require New Cybersecurity Standards In Response To SolarWinds Attack Enlarge this image toggle caption Saul Loeb/AFP via Getty Images Saul Loeb/AFP via Getty Images The Biden administration is putting the final touches on an executive order aimed at helping the U.S. defend itself against sophisticated cyberattacks like the one Russian hackers recently leveled against Texas software-maker SolarWinds. …

SolarWinds hacking campaign puts Microsoft in the hot seat
3 years, 8 months ago

SolarWinds hacking campaign puts Microsoft in the hot seat

Associated Press  

BOSTON — The sprawling hacking campaign deemed a grave threat to U.S. national security came to be known as SolarWinds, for the company whose software update was seeded by Russian intelligence agents with malware to penetrate sensitive government and private networks. The SolarWinds hackers took full advantage of what George Kurtz, CEO of top cybersecurity firm CrowdStrike, called “systematic weaknesses” …

SolarWinds hacking campaign puts Microsoft in hot seat
3 years, 8 months ago

SolarWinds hacking campaign puts Microsoft in hot seat

Live Mint  

The sprawling, months long hacking campaign deemed a grave threat to U.S. national security came to be known as SolarWinds for the company whose software update Russian intelligence agents stealthily seeded with malware to penetrate sensitive government and private networks. The SolarWinds hackers took full advantage of what George Kurtz, CEO of top cybersecurity firm CrowdStrike, called “systematic weaknesses" in …

Biden Administration Sanctions Russia Over 'Worst Nightmare' Cyberattack : Consider This from NPR : NPR
3 years, 8 months ago

Biden Administration Sanctions Russia Over 'Worst Nightmare' Cyberattack : Consider This from NPR : NPR

NPR  

The Story Behind The SolarWinds Cyberattack Enlarge this image toggle caption Zoë van Dijk for NPR Zoë van Dijk for NPR Last year, hackers believed to be directed by the Russian intelligence service, the SVR, slipped a malicious code into a routine software update from a Texas- based company called SolarWinds. They then used it as a vehicle for a …

SolarWinds says dealing with hack fallout cost at least $18 million
3 years, 8 months ago

SolarWinds says dealing with hack fallout cost at least $18 million

The Hindu  

Texas-based SolarWinds Corp said the sprawling breach stemming from the compromise of its flagship software product has cost the company at least $18 million in the first three months of 2021. In preliminary results made public on Tuesday, the company said it spent between $18 million and $19 million in the first quarter of 2021 to investigate and remediate what …

Senators press for more on SolarWinds hack after AP report
3 years, 8 months ago

Senators press for more on SolarWinds hack after AP report

Associated Press  

Key lawmakers said Tuesday they’re concerned they’ve been kept in the dark about what suspected Russian hackers stole from the federal government and they pressed Biden administration officials for more details about the scope of what’s known as the SolarWinds hack. The AP reported last month that suspected Russian hackers gained access to email accounts belonging to the Trump administration’s …

AP sources: SolarWinds hack got emails of top DHS officials
3 years, 8 months ago

AP sources: SolarWinds hack got emails of top DHS officials

Associated Press  

Suspected Russian hackers gained access to email accounts belonging to the Trump administration’s head of the Department of Homeland Security and members of the department’s cybersecurity staff whose jobs included hunting threats from foreign countries, The Associated Press has learned. Energy Department spokesman Kevin Liao said it “has found no evidence the network that maintains senior officials’ schedules was compromised.” …

China’s Microsoft hack, Russia’s solar winds attack threaten to overwhelm US
3 years, 9 months ago

China’s Microsoft hack, Russia’s solar winds attack threaten to overwhelm US

Live Mint  

China’s global attack on Microsoft’s popular email software revealed last week and an equally sprawling Russian attack discovered three months ago have created a two-front war that threatens to overwhelm cybersecurity’s emergency responders, according to former US officials and private security firms. And the U.S. Cybersecurity and Infrastructure Security Agency in an emergency advisory Monday described hackers’ exploitation of the …

Microsoft failed to shore up defenses that could have limited SolarWinds hack -U.S. senator
3 years, 9 months ago

Microsoft failed to shore up defenses that could have limited SolarWinds hack -U.S. senator

The Hindu  

Microsoft Corp's failure to fix known problems with its cloud software facilitated the massive SolarWinds hack that compromised at least nine federal government agencies, according to security experts and the office of U.S. A vulnerability first publicly revealed by researchers in 2017 allows hackers to fake the identity of authorized employees to gain access to customers' cloud services. “The federal …

‘They may be in the system’: Questions remain on SolarWinds hack
3 years, 9 months ago

‘They may be in the system’: Questions remain on SolarWinds hack

Al Jazeera  

The US House of Representatives Oversight and Homeland Security Committees held a joint hearing on Friday on the implications of the ongoing SolarWinds hack for the government and private industry. Representative Carolyn B Maloney, chairwoman of the Oversight Committee, said “a sophisticated attacker reported to be the Russian government broke into the SolarWinds system and inserted malicious code into its …

SolarWinds hack required massive, sophisticated effort
3 years, 10 months ago

SolarWinds hack required massive, sophisticated effort

The Hindu  

The stunning SolarWinds hack that cybersecurity experts blame on Russia likely took a massive, disciplined effort by more than 1,000 software engineers, Microsoft President Brad Smith said Tuesday. The SolarWinds incident was different, he said: it was like a burglar who "manages to turn off the alarm system for every home and every building in the entire city." In the …

Massive breach fuels calls for U.S. action on cybersecurity
3 years, 10 months ago

Massive breach fuels calls for U.S. action on cybersecurity

The Hindu  

Jolted by a sweeping hack that may have revealed government and corporate secrets to Russia, U.S. officials are scrambling to reinforce the nation’s cyber defenses and recognizing that an agency created two years ago to protect America’s networks and infrastructure lacks the money, tools and authority to counter such sophisticated threats. “It’s really highlighted the investments we need to make …

SolarWinds hack: Biden administration says investigation is likely to take ‘several months’
3 years, 10 months ago

SolarWinds hack: Biden administration says investigation is likely to take ‘several months’

CNN  

Washington CNN — The US government’s probe into the devastating SolarWinds breach is likely to take “several months” at least, according to the top White House cybersecurity official, speaking to reporters Wednesday in the Biden administration’s first public assessment of the gravity of the suspected Russian spying campaign. At least nine federal agencies were specifically targeted by the hacking operation, …

White House names SolarWinds response leader amid criticism
3 years, 10 months ago

White House names SolarWinds response leader amid criticism

The Independent  

Sign up for the daily Inside Washington email for exclusive US coverage and analysis sent to your inbox Get our free Inside Washington email Get our free Inside Washington email SIGN UP I would like to be emailed about offers, events and updates from The Independent. Read our privacy policy After members of Congress criticized as “disorganized” the U.S. response …

Suspected Chinese hackers breach US government via SolarWinds bug
3 years, 10 months ago

Suspected Chinese hackers breach US government via SolarWinds bug

Al Jazeera  

FBI investigators found that a federal payroll agency inside the US Department of Agriculture was among the organisations affected by a recent hack, potentially compromising government employees’ sensitive data. Suspected Chinese hackers exploited a flaw in software made by SolarWinds Corp to help break into United States government computers last year, five people familiar with the matter told Reuters news …

Opinion: The SolarWinds hack is stunning. Here’s what should be done
3 years, 11 months ago

Opinion: The SolarWinds hack is stunning. Here’s what should be done

CNN  

Editor’s Note: Bruce Schneier is a fellow and lecturer at the Harvard Kennedy School. Russia’s SVR leveraged one of those vulnerabilities when it gained access to SolarWinds’ update server, tricking thousands of customers into downloading a malicious software update that gave the Russians access to those networks. These security requirements need to be monitored throughout the software’s life cycle, along …

SolarWinds hack: Russian cybercriminals attack CrowdStrike, attempt to read emails
3 years, 11 months ago

SolarWinds hack: Russian cybercriminals attack CrowdStrike, attempt to read emails

India TV News  

Cyber-security firm CrowdStrike has revealed that suspected Russian hackers who broke into a series of US government agencies and enterprises via compromising SolarWinds software, attacked its network but failed to extract any information. The suspected Russian hackers installed malware in the Orion software sold by the IT management company SolarWinds, and accessed sensitive data belonging to several US government agencies, …

U.S. Cyber Agency: SolarWinds Attack Hitting Local Governments
4 years ago

U.S. Cyber Agency: SolarWinds Attack Hitting Local Governments

NPR  

U.S. Cyber Agency: SolarWinds Attack Hitting Local Governments Enlarge this image toggle caption Olivier Douliery/AFP via Getty Images Olivier Douliery/AFP via Getty Images Updated at 3:30 a.m. ET A U.S. cybersecurity agency said Wednesday that the far-reaching attack into the IT management company SolarWinds discovered earlier this month has infected more systems than previously thought. The U.S. Cybersecurity and Infrastructure …

Massive SolarWinds hack has big businesses on high alert
4 years ago

Massive SolarWinds hack has big businesses on high alert

CNN  

CNN Business — The US government was rattled this week by a cyberattack that compromised a third-party software vendor’s systems and led to data breaches at several federal agencies, including the Department of Commerce, the Department of Energy and the Department of Homeland Security’s cyber arm. A Cisco spokesperson told CNN Business on Friday that it had “identified and mitigated …

Hack against US is ‘grave’ threat, cybersecurity agency says
4 years ago

Hack against US is ‘grave’ threat, cybersecurity agency says

Associated Press  

WASHINGTON — Federal authorities expressed increased alarm Thursday about a long-undetected intrusion into U.S. and other computer systems around the globe that officials suspect was carried out by Russian hackers. The hack compromised federal agencies and “critical infrastructure” in a sophisticated attack that was hard to detect and will be difficult to undo, the Cybersecurity and Infrastructure Security Agency said …

Microsoft Says 40 Customers Hit By Ongoing Hack Of Government Agencies
4 years ago

Microsoft Says 40 Customers Hit By Ongoing Hack Of Government Agencies

NPR  

Microsoft Says 40 Customers Hit By Ongoing Hack Of Government Agencies Enlarge this image toggle caption Altaf Qadri/AP Altaf Qadri/AP Microsoft President Brad Smith has called the ever-growing hacking campaign into a U.S. tech firm that was discovered this week "a moment of reckoning." Smith said 40 of Microsoft's customers were also hit by the breach because they had the …

Little-known SolarWinds gets scrutiny over hack, stock sales
4 years ago

Little-known SolarWinds gets scrutiny over hack, stock sales

Associated Press  

Before this week, few people were aware of SolarWinds, a Texas-based software company providing vital computer network monitoring services to major corporations and government agencies worldwide. Founded in 1999 by two brothers in Tulsa, Oklahoma, ahead of the feared turn-of-the-millennium Y2K computer bug, the company’s website says its first product “arrived on the scene to help IT pros quell everyone’s …

US agencies, companies secure networks after huge hack
4 years ago

US agencies, companies secure networks after huge hack

Associated Press  

WASHINGTON — U.S. government agencies and private companies rushed Monday to secure their computer networks following the disclosure of a sophisticated and long-running cyber-espionage intrusion suspected of being carried out by Russian hackers. “Quite honestly, my heart sank when I saw some of the details, just the amount of information they could potentially have if they are reading everyone’s emails …

US agencies, companies secure networks after cyberattacks
4 years ago

US agencies, companies secure networks after cyberattacks

Al Jazeera  

United States government agencies and private companies rushed on Monday to secure their computer networks following the disclosure of a sophisticated and long-running cyberespionage intrusion suspected of being carried out by Russian hackers. But the potential threat was significant enough that the Department of Homeland Security’s cybersecurity unit directed all federal agencies to remove compromised network management software and thousands …

EXPLAINER: How bad is the hack that targeted US agencies?
4 years ago

EXPLAINER: How bad is the hack that targeted US agencies?

Associated Press  

Governments and major corporations worldwide are scrambling to see if they, too, were victims of a global cyberespionage campaign that penetrated multiple U.S. government agencies and involved a common software product used by thousands of organizations. The malware, affecting a product made by U.S. company SolarWinds, gave elite hackers remote access into an organization’s networks so they could steal information. …

Discover Related