18,000 Organizations Possibly Compromised in Massive Supply-Chain Cyberattack

Sorry, this post has not been published yet, check again later!

December 14, 2020
Published by:

Dark Reading

In what may well turn out to be one of the most significant supply-chain attacks in recent years, a likely nation-state backed group compromised systems at SolarWinds and inserted malware into updates of the company's widely used Orion network management products that were released between March and June 2020. Matt Walmsley, EMEA director at Vectra, says the attackers likely manipulated Security Assertion Mark-up Language (SAML) authentication tokens used in Single Sign On to try and escalate privileges in the early stages of the campaign.

Read publication

Most recent media coverage

Kaseya Ransomware Attack: What to Know About Supply Chain Security

July 14, 2021

DICE Insights

Read more

Fashion Retailer Guess Announces Data Breach

July 14, 2021

Security Magazine

Read more

Where Did REvil Ransomware Go? Will it Be Back?

July 14, 2021

Security Boulevard

Read more