U.S. Cyber Agency: SolarWinds Attack Hitting Local Governments
4 years ago

U.S. Cyber Agency: SolarWinds Attack Hitting Local Governments

NPR  

U.S. Cyber Agency: SolarWinds Attack Hitting Local Governments Enlarge this image toggle caption Olivier Douliery/AFP via Getty Images Olivier Douliery/AFP via Getty Images Updated at 3:30 a.m. ET A U.S. cybersecurity agency said Wednesday that the far-reaching attack into the IT management company SolarWinds discovered earlier this month has infected more systems than previously thought. The U.S. Cybersecurity and Infrastructure Security Agency, also known as CISA, said Wednesday that the hack not only affected key federal agencies, but also computer systems used by state and local governments, critical infrastructure entities and other private sector organizations. CISA said that the agency is "tracking a significant cyber incident" having an impact on networks across federal, state, and local governments.

Cyber Local Governments Agency Cisa Solarwinds Attack  local  systems  malware  solarwinds  attack  agency  software  cyber  hack  federal  cisa  hitting  governments

History of this topic

US regulators sue SolarWinds and its security chief for alleged cyber neglect ahead of Russian hack
1 year, 1 month ago

US regulators sue SolarWinds and its security chief for alleged cyber neglect ahead of Russian hack

Associated Press  

U.S. regulators on Monday sued SolarWinds, a Texas-based technology company whose software was breached in a massive 2020 Russian cyberespionage campaign, for fraud for failing to disclose security deficiencies ahead of the stunning hack. In the 68-page complaint filed in New York federal court, the SEC says SolarWinds and its then vice president of security, Tim Brown, defrauded investors and …

The Russian hacker group behind the SolarWinds attack is at it again, Microsoft says
3 years, 1 month ago

The Russian hacker group behind the SolarWinds attack is at it again, Microsoft says

NPR  

The Russian hacker group behind the SolarWinds attack is at it again, Microsoft says Enlarge this image toggle caption Suzanne Cordeiro/AFP via Getty Images Suzanne Cordeiro/AFP via Getty Images Last year a hacker group used a bit of malicious code it hid in a software update by the company SolarWinds to launch an immense cyberattack against U.S. government agencies and …

Microsoft says new breach discovered in probe of suspected SolarWinds hackers
3 years, 5 months ago

Microsoft says new breach discovered in probe of suspected SolarWinds hackers

The Hindu  

Microsoft said on Friday an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers. "A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions," the warning reads in part. After commenting on a broader …

Biden budget sets aside $750 million for SolarWinds response
3 years, 6 months ago

Biden budget sets aside $750 million for SolarWinds response

The Hindu  

U.S. President Joe Biden's proposed budget includes $750 million for the government agencies hit by the SolarWinds hack to pay for cybersecurity improvements to prevent another attack. The money comes on top of a $500 million fund for federal cybersecurity as the U.S. government recovers from the cyber attack that hit nine agencies including the State Department and Treasury. The …

SolarWinds hacking campaign puts Microsoft in the hot seat
3 years, 8 months ago

SolarWinds hacking campaign puts Microsoft in the hot seat

Associated Press  

BOSTON — The sprawling hacking campaign deemed a grave threat to U.S. national security came to be known as SolarWinds, for the company whose software update was seeded by Russian intelligence agents with malware to penetrate sensitive government and private networks. The SolarWinds hackers took full advantage of what George Kurtz, CEO of top cybersecurity firm CrowdStrike, called “systematic weaknesses” …

SolarWinds hacking campaign puts Microsoft in hot seat
3 years, 8 months ago

SolarWinds hacking campaign puts Microsoft in hot seat

Live Mint  

The sprawling, months long hacking campaign deemed a grave threat to U.S. national security came to be known as SolarWinds for the company whose software update Russian intelligence agents stealthily seeded with malware to penetrate sensitive government and private networks. The SolarWinds hackers took full advantage of what George Kurtz, CEO of top cybersecurity firm CrowdStrike, called “systematic weaknesses" in …

Biden Administration Sanctions Russia Over 'Worst Nightmare' Cyberattack : Consider This from NPR : NPR
3 years, 8 months ago

Biden Administration Sanctions Russia Over 'Worst Nightmare' Cyberattack : Consider This from NPR : NPR

NPR  

The Story Behind The SolarWinds Cyberattack Enlarge this image toggle caption Zoë van Dijk for NPR Zoë van Dijk for NPR Last year, hackers believed to be directed by the Russian intelligence service, the SVR, slipped a malicious code into a routine software update from a Texas- based company called SolarWinds. They then used it as a vehicle for a …

Senators press for more on SolarWinds hack after AP report
3 years, 8 months ago

Senators press for more on SolarWinds hack after AP report

Associated Press  

Key lawmakers said Tuesday they’re concerned they’ve been kept in the dark about what suspected Russian hackers stole from the federal government and they pressed Biden administration officials for more details about the scope of what’s known as the SolarWinds hack. The AP reported last month that suspected Russian hackers gained access to email accounts belonging to the Trump administration’s …

Hunting the hunters: How Russian hackers targeted US cyber first responders in SolarWinds breach
3 years, 8 months ago

Hunting the hunters: How Russian hackers targeted US cyber first responders in SolarWinds breach

CNN  

Washington CNN — After infiltrating US government computer networks early last year as part of the SolarWinds data breach, Russian hackers then turned their attention to the very people whose job was to track them down. Over the course of a few months, as US officials remained unaware of the breach, hackers identified a handful of key cyber security officials …

AP sources: SolarWinds hack got emails of top DHS officials
3 years, 8 months ago

AP sources: SolarWinds hack got emails of top DHS officials

Associated Press  

Suspected Russian hackers gained access to email accounts belonging to the Trump administration’s head of the Department of Homeland Security and members of the department’s cybersecurity staff whose jobs included hunting threats from foreign countries, The Associated Press has learned. Energy Department spokesman Kevin Liao said it “has found no evidence the network that maintains senior officials’ schedules was compromised.” …

China’s Microsoft hack, Russia’s solar winds attack threaten to overwhelm US
3 years, 9 months ago

China’s Microsoft hack, Russia’s solar winds attack threaten to overwhelm US

Live Mint  

China’s global attack on Microsoft’s popular email software revealed last week and an equally sprawling Russian attack discovered three months ago have created a two-front war that threatens to overwhelm cybersecurity’s emergency responders, according to former US officials and private security firms. And the U.S. Cybersecurity and Infrastructure Security Agency in an emergency advisory Monday described hackers’ exploitation of the …

Microsoft failed to shore up defenses that could have limited SolarWinds hack -U.S. senator
3 years, 9 months ago

Microsoft failed to shore up defenses that could have limited SolarWinds hack -U.S. senator

The Hindu  

Microsoft Corp's failure to fix known problems with its cloud software facilitated the massive SolarWinds hack that compromised at least nine federal government agencies, according to security experts and the office of U.S. A vulnerability first publicly revealed by researchers in 2017 allows hackers to fake the identity of authorized employees to gain access to customers' cloud services. “The federal …

‘They may be in the system’: Questions remain on SolarWinds hack
3 years, 9 months ago

‘They may be in the system’: Questions remain on SolarWinds hack

Al Jazeera  

The US House of Representatives Oversight and Homeland Security Committees held a joint hearing on Friday on the implications of the ongoing SolarWinds hack for the government and private industry. Representative Carolyn B Maloney, chairwoman of the Oversight Committee, said “a sophisticated attacker reported to be the Russian government broke into the SolarWinds system and inserted malicious code into its …

SolarWinds hack required massive, sophisticated effort
3 years, 10 months ago

SolarWinds hack required massive, sophisticated effort

The Hindu  

The stunning SolarWinds hack that cybersecurity experts blame on Russia likely took a massive, disciplined effort by more than 1,000 software engineers, Microsoft President Brad Smith said Tuesday. The SolarWinds incident was different, he said: it was like a burglar who "manages to turn off the alarm system for every home and every building in the entire city." In the …

State-sponsored cyber attacks have corporates worried
3 years, 10 months ago

State-sponsored cyber attacks have corporates worried

Live Mint  

The recent SolarWinds hack, which left a spate of US government offices and private companies vulnerable to cyber criminals, was the latest example of the devastation a nation-state cyber attack can cause. Microsoft president Brad Smith called it “the largest and most sophisticated attack the world has ever seen.” Now, findings from a new survey report show that corporates around …

India’s cyber defenses breached and reported; govt. yet to fix it
3 years, 10 months ago

India’s cyber defenses breached and reported; govt. yet to fix it

The Hindu  

A server containing large backups of financial records, dozens of police reports exposing victims’ data, extremely sensitive government systems, and other utmost critical information holding databases have been breached by a team of ethical hackers going by the name Sakura Samurai. “These exposed records along with other various SQL server dumps and Rob’s Police Record Exposure is enough to constitute …

Massive breach fuels calls for U.S. action on cybersecurity
3 years, 10 months ago

Massive breach fuels calls for U.S. action on cybersecurity

The Hindu  

Jolted by a sweeping hack that may have revealed government and corporate secrets to Russia, U.S. officials are scrambling to reinforce the nation’s cyber defenses and recognizing that an agency created two years ago to protect America’s networks and infrastructure lacks the money, tools and authority to counter such sophisticated threats. “It’s really highlighted the investments we need to make …

SolarWinds hack: Biden administration says investigation is likely to take ‘several months’
3 years, 10 months ago

SolarWinds hack: Biden administration says investigation is likely to take ‘several months’

CNN  

Washington CNN — The US government’s probe into the devastating SolarWinds breach is likely to take “several months” at least, according to the top White House cybersecurity official, speaking to reporters Wednesday in the Biden administration’s first public assessment of the gravity of the suspected Russian spying campaign. At least nine federal agencies were specifically targeted by the hacking operation, …

Suspected Chinese hackers breach US government via SolarWinds bug
3 years, 10 months ago

Suspected Chinese hackers breach US government via SolarWinds bug

Al Jazeera  

FBI investigators found that a federal payroll agency inside the US Department of Agriculture was among the organisations affected by a recent hack, potentially compromising government employees’ sensitive data. Suspected Chinese hackers exploited a flaw in software made by SolarWinds Corp to help break into United States government computers last year, five people familiar with the matter told Reuters news …

SolarWinds hackers gave themselves top administrative privileges to spy on victims undetected, DHS says
3 years, 11 months ago

SolarWinds hackers gave themselves top administrative privileges to spy on victims undetected, DHS says

CNN  

Washington CNN — The Russia-linked hackers behind a devastating breach of US government and commercial networks gave themselves top administrative privileges, allowing them to spy on their targets with impunity, according to a US government bulletin. The advisory published Friday by the Department of Homeland Security represents the agency’s most detailed explanation yet of how the attackers were able to …

US intel agencies say group behind recent government hack ‘likely Russian in origin’
3 years, 11 months ago

US intel agencies say group behind recent government hack ‘likely Russian in origin’

CNN  

Washington CNN — US intelligence and law enforcement agencies investigating the massive hacking campaign targeting American government agencies and private sector companies issued a joint statement Tuesday saying the group responsible “likely originated in Russia” and the attack is believed to be an act of espionage rather than cyber warfare, as some lawmakers have suggested. In short, the statement issued …

Opinion: The SolarWinds hack is stunning. Here’s what should be done
3 years, 11 months ago

Opinion: The SolarWinds hack is stunning. Here’s what should be done

CNN  

Editor’s Note: Bruce Schneier is a fellow and lecturer at the Harvard Kennedy School. Russia’s SVR leveraged one of those vulnerabilities when it gained access to SolarWinds’ update server, tricking thousands of customers into downloading a malicious software update that gave the Russians access to those networks. These security requirements need to be monitored throughout the software’s life cycle, along …

Concern mounts over government cyber agency’s struggle to respond to hack fallout
3 years, 11 months ago

Concern mounts over government cyber agency’s struggle to respond to hack fallout

CNN  

Washington CNN — With Microsoft acknowledging for the first time this past week that suspected Russian hackers behind a massive government security breach also gained access to its source code, pressure is mounting on US officials and cybersecurity experts to explain how the attackers infiltrated various US computer networks, what they did once inside and the steps that are being …

SolarWinds hackers saw some of our source code: Microsoft
3 years, 11 months ago

SolarWinds hackers saw some of our source code: Microsoft

India TV News  

Microsoft has admitted that the alleged Russian hackers behind the massive SolarWinds attack that affected several top-notch enterprises and government agencies, attempted activities beyond just the presence of malicious SolarWinds code in its environment. In a Security Response Center update, the tech giant said that hackers were able to "view source code in a number of source code repositories". "We …

SolarWinds hack: Russian cybercriminals attack CrowdStrike, attempt to read emails
3 years, 11 months ago

SolarWinds hack: Russian cybercriminals attack CrowdStrike, attempt to read emails

India TV News  

Cyber-security firm CrowdStrike has revealed that suspected Russian hackers who broke into a series of US government agencies and enterprises via compromising SolarWinds software, attacked its network but failed to extract any information. The suspected Russian hackers installed malware in the Orion software sold by the IT management company SolarWinds, and accessed sensitive data belonging to several US government agencies, …

U.S. cyber agency says SolarWinds hackers are 'impacting' state, local governments
4 years ago

U.S. cyber agency says SolarWinds hackers are 'impacting' state, local governments

The Hindu  

The U.S. cybersecurity agency said on Wednesday that a sprawling cyber espionage campaign made public earlier this month is affecting state and local governments, although it released few additional details. The hacking campaign, which used U.S. tech company SolarWinds as a springboard to penetrate federal government networks, was "impacting enterprise networks across federal, state, and local governments, as well as …

SolarWinds hack: US reaches out to intelligence alliance partners on suspected Russian hack
4 years ago

SolarWinds hack: US reaches out to intelligence alliance partners on suspected Russian hack

CNN  

CNN — White House National Security Adviser Robert O’Brien held a call on Tuesday with his counterparts in an international intelligence sharing alliance to discuss the suspected Russian cyberattack on US government agencies and propose a joint statement condemning the breach, according to a senior administration official and two officials from the other nations. The US, UK Canada, Australia and …

Massive SolarWinds hack has big businesses on high alert
4 years ago

Massive SolarWinds hack has big businesses on high alert

CNN  

CNN Business — The US government was rattled this week by a cyberattack that compromised a third-party software vendor’s systems and led to data breaches at several federal agencies, including the Department of Commerce, the Department of Energy and the Department of Homeland Security’s cyber arm. A Cisco spokesperson told CNN Business on Friday that it had “identified and mitigated …

Hackers targeted US nuclear weapons agency in massive cybersecurity breach, reports say
4 years ago

Hackers targeted US nuclear weapons agency in massive cybersecurity breach, reports say

The Independent  

Sign up for the daily Inside Washington email for exclusive US coverage and analysis sent to your inbox Get our free Inside Washington email Please enter a valid email address Please enter a valid email address SIGN UP I would like to be emailed about offers, events and updates from The Independent. Please try again later {{ /verifyErrors }} The …

Microsoft Confirms It Found Malicious Software From SolarWinds in Its Systems
4 years ago

Microsoft Confirms It Found Malicious Software From SolarWinds in Its Systems

News 18  

Microsoft Corp said on Thursday it found malicious software in its systems related to a massive hacking campaign disclosed by US officials this week, adding a top technology target to a growing list of attacked government agencies. The US National Security Agency issued a rare “cybersecurity advisory” Thursday detailing how certain Microsoft Azure cloud services may have been compromised by …

U.S. cybersecurity agency warns of ‘grave threat’ to computer networks
4 years ago

U.S. cybersecurity agency warns of ‘grave threat’ to computer networks

The Hindu  

Federal authorities have expressed increased alarm about an intrusion into the U.S. and other computer systems around the globe that officials suspect was carried out by Russian hackers. The Cybersecurity and Infrastructure Security Agency said in its most detailed comments yet that the intrusion had compromised federal agencies as well as critical infrastructure in a sophisticated attack that was hard …

US govt issues urgent warning against recent cyberattacks, says it's 'a grave risk to the federal government'
4 years ago

US govt issues urgent warning against recent cyberattacks, says it's 'a grave risk to the federal government'

Firstpost  

A Microsoft “heat map” of infections shows that 80 percent of the hacks are in the United States, while Russia shows no infections at all. Federal officials issued an urgent warning on Thursday that hackers, who US intelligence agencies believed were working for the Kremlin, used a far wider variety of tools than previously known to penetrate government systems, and …

Hack against US is ‘grave’ threat, cybersecurity agency says
4 years ago

Hack against US is ‘grave’ threat, cybersecurity agency says

Associated Press  

WASHINGTON — Federal authorities expressed increased alarm Thursday about a long-undetected intrusion into U.S. and other computer systems around the globe that officials suspect was carried out by Russian hackers. The hack compromised federal agencies and “critical infrastructure” in a sophisticated attack that was hard to detect and will be difficult to undo, the Cybersecurity and Infrastructure Security Agency said …

US cybersecurity agency warns of 'grave threat' after 'critical infrastructure' hacked
4 years ago

US cybersecurity agency warns of 'grave threat' after 'critical infrastructure' hacked

ABC  

US authorities have expressed increased alarm about a long-undetected intrusion into computer systems around the world that officials suspect was carried out by Russian hackers. Key points: The Department of Energy and the Treasury Department were among the agencies infiltrated Cybersecurity officials are yet to clarify how significant the attacks were, and what infrastructure was successfully targeted The UK has …

Microsoft Says 40 Customers Hit By Ongoing Hack Of Government Agencies
4 years ago

Microsoft Says 40 Customers Hit By Ongoing Hack Of Government Agencies

NPR  

Microsoft Says 40 Customers Hit By Ongoing Hack Of Government Agencies Enlarge this image toggle caption Altaf Qadri/AP Altaf Qadri/AP Microsoft President Brad Smith has called the ever-growing hacking campaign into a U.S. tech firm that was discovered this week "a moment of reckoning." Smith said 40 of Microsoft's customers were also hit by the breach because they had the …

Little-known SolarWinds gets scrutiny over hack, stock sales
4 years ago

Little-known SolarWinds gets scrutiny over hack, stock sales

Associated Press  

Before this week, few people were aware of SolarWinds, a Texas-based software company providing vital computer network monitoring services to major corporations and government agencies worldwide. Founded in 1999 by two brothers in Tulsa, Oklahoma, ahead of the feared turn-of-the-millennium Y2K computer bug, the company’s website says its first product “arrived on the scene to help IT pros quell everyone’s …

SolarWinds Orion hack: Why cybersecurity experts are worried
4 years ago

SolarWinds Orion hack: Why cybersecurity experts are worried

CNN  

Washington CNN Business — The US government is reeling from multiple data breaches at top federal agencies, the result of a worldwide hacking campaign with possible ties to Russia. “On a scale of 1 to 10, I’m at a 9 — and it’s not because of what I know; it’s because of what we still don’t know.” On Sunday evening, …

US agencies, companies secure networks after huge hack
4 years ago

US agencies, companies secure networks after huge hack

Associated Press  

WASHINGTON — U.S. government agencies and private companies rushed Monday to secure their computer networks following the disclosure of a sophisticated and long-running cyber-espionage intrusion suspected of being carried out by Russian hackers. “Quite honestly, my heart sank when I saw some of the details, just the amount of information they could potentially have if they are reading everyone’s emails …

US agencies, companies secure networks after cyberattacks
4 years ago

US agencies, companies secure networks after cyberattacks

Al Jazeera  

United States government agencies and private companies rushed on Monday to secure their computer networks following the disclosure of a sophisticated and long-running cyberespionage intrusion suspected of being carried out by Russian hackers. But the potential threat was significant enough that the Department of Homeland Security’s cybersecurity unit directed all federal agencies to remove compromised network management software and thousands …

What We Know About Russia's Alleged Hack Of The U.S. Government And Tech Companies
4 years ago

What We Know About Russia's Alleged Hack Of The U.S. Government And Tech Companies

NPR  

What We Know About Russia's Alleged Hack Of The U.S. Government And Tech Companies Enlarge this image toggle caption Bill Clark/CQ-Roll Call, Inc via Getty Imag Bill Clark/CQ-Roll Call, Inc via Getty Imag A massive computer breach allowed hackers to spend months exploring numerous U.S. government networks and private companies' systems around the world. After several days of saying relatively …

EXPLAINER: How bad is the hack that targeted US agencies?
4 years ago

EXPLAINER: How bad is the hack that targeted US agencies?

Associated Press  

Governments and major corporations worldwide are scrambling to see if they, too, were victims of a global cyberespionage campaign that penetrated multiple U.S. government agencies and involved a common software product used by thousands of organizations. The malware, affecting a product made by U.S. company SolarWinds, gave elite hackers remote access into an organization’s networks so they could steal information. …

US agencies hacked in months-long global cyberspying campaign
4 years ago

US agencies hacked in months-long global cyberspying campaign

India TV News  

Hackers broke into the networks of the Treasury and Commerce departments as part of a monthslong global cyberespionage campaign revealed Sunday, just days after a prominent cybersecurity firm said it had been breached in an attack that industry experts said bore the hallmarks of Russian tradecraft. The FBI and the Department of Homeland Security’s cybersecurity arm were investigating what experts …

U.S. government agencies hacked; Russia a possible culprit
4 years ago

U.S. government agencies hacked; Russia a possible culprit

The Hindu  

Hackers broke into the networks of federal agencies including the Treasury and Commerce departments in attacks revealed just days after U.S. officials warned that cyber actors linked to the Russian government were exploiting vulnerabilities to target sensitive data. The attacks were disclosed less than a week after a National Security Agency advisory warned that Russian government hackers were exploiting vulnerabilities …

Suspected Russian Hackers Spied On U.S. Treasury Emails: Report
4 years ago

Suspected Russian Hackers Spied On U.S. Treasury Emails: Report

Huff Post  

WASHINGTON - Hackers believed to be working for Russia have been monitoring internal email traffic at the U.S. Treasury Department and an agency that decides internet and telecommunications policy, according to people familiar with the matter. There is concern within the U.S. intelligence community that the hackers who targeted Treasury and the Commerce Department’s National Telecommunications and Information Administration used …

Discover Related