SolarWinds Hack

“Misleading” Cybersecurity Disclosures Turn Into SEC Fines for SolarWinds Hack Victims

October 29, 2024

Each of the fined companies learned that they had been breached during the SolarWinds hack in 2020 or 2021. Each was found by the SEC to have negligently minimized its cybersecurity disclosures in ways that could mislead investors, but all using somewhat different language.

Cyber Security Insights

Three Vulnerabilities Exposed During SolarWinds Attack & How It Could Have Been Prevented

March 22, 2021

Cybersecurity professionals were left in the dark as the SolarWinds attack unfolded. Looking at how this could have been prevented, three distinct vulnerabilities stand out.

Close-up of a black keyboard showing Chinese hackers SolarWinds hack

Cyber Security News

Suspected Chinese Hackers Exploit a Different SolarWinds Hack To Compromise USDA’s National Finance Center

February 11, 2021

Suspected Chinese hackers exploited a second SolarWinds hack to compromise the National Finance Center, which processes salaries for agencies including the FBI and the DHS.

US flag is depicted on the screen with code showing Russian hackers in SolarWinds hack

Cyber Security News

In Joint Statement, US Intelligence Agencies Pin SolarWinds Hack on Russian Hackers

January 12, 2021

The March 2020 SolarWinds hack, which was not discovered for months, has formally been blamed on Russian hackers by a coalition of US intelligence agencies.

Dam of the Alcantara Swamp showing SolarWinds Hack impact on critical infrastructure

Cyber Security News

SolarWinds Hack Possibly Affected Critical Infrastructure Entities, Federal, State, And Local Government Agencies

January 1, 2021

CISA says that SolarWinds hack possibly affected federal, state, and local government agencies and critical infrastructure entities dealing with gas, electricity, and manufacturing.

Golden padlock on keyboard showing federated login in SolarWinds hack

Cyber Security News

NSA Advisory Says VMWare Flaw Used To Perform Federated Login in SolarWinds Hack

December 28, 2020

NSA issued an advisory that hackers were exploiting VMWare’s and SolarWinds’ Orion vulnerabilities to perform federated login and execute attacks as part of SolarWinds hack.

SolarWinds Hack

“Misleading” Cybersecurity Disclosures Turn Into SEC Fines for SolarWinds Hack Victims

Three Vulnerabilities Exposed During SolarWinds Attack & How It Could Have Been Prevented

Suspected Chinese Hackers Exploit a Different SolarWinds Hack To Compromise USDA’s National Finance Center

In Joint Statement, US Intelligence Agencies Pin SolarWinds Hack on Russian Hackers

SolarWinds Hack Possibly Affected Critical Infrastructure Entities, Federal, State, And Local Government Agencies

“Identity Hijacking” of AI Workflows Can Expose Sensitive Internal Information to Attackers With a Simple Request

Data Breach Hits Medical Supply Chain Giant McKesson, Exposing 284 Million Patient Records

Over 153 Million Drivers’ Licenses Offered on Dark Web After Identity Verification Company Breach

Cyber Attack at Three UK Airports Leaks PII of 8.7 Million Customers