SolarWinds Sunburst attack

This is the best summary I’ve seen so far:

the Guardian – 23 Dec 20

The US has suffered a massive cyberbreach. It’s hard to overstate how bad it…

This is a security failure of enormous proportions – and a wake-up call. The US must rethink its cybersecurity protocols

Although updates continue to come in:

U.S. – 24 Dec 20

Suspected Russian hackers used Microsoft vendors to breach customers

The suspected Russian hackers behind the worst U.S. cyber attack in years leveraged reseller access to Microsoft Corp services to penetrate targets that had no compromised network software from SolarWinds Corp, investigators said.

My oh-so-humble opinion on this one is that there is no substitute for knowing your s**t. Outsource at your own risk, because this is war, and the the bad guys are playing to kill.

2 Likes