Tag: SolarWinds Orion

Exactly a year after the SolarWinds attack, when suspected nation-state hackers gained access to the networks, systems, and data of thousands of SolarWinds customers, it is a moment of reckoning for the cybersecurity sector, as it tries to prevent newer…

A U.S. Department of Defense (DoD) audit report found that the defense agency along with the Department of Homeland Security (DHS) failed to plan and execute activities to implement the memorandums between the two agencies, regarding cybersecurity and cyberspace operations…

Cyber attackers are leveraging privilege escalation techniques and attempting to escape from within the container to the host machine, as they continue to advance and adapt their tactics, targeting both the software supply chain of cloud-native applications, and their infrastructure,…

The U.S. Government Accountability Office (GAO) stressed that, as a result of not fully implementing foundational security practices, federal agencies continue to face software supply chain threats and are at a greater risk of malicious actors exploiting vulnerabilities in the…

The Cybersecurity and Infrastructure Security Agency (CISA) issued Eviction Guidance in its ongoing response to the cyber intrusion campaign impacting SolarWinds Orion and Microsoft Office365 environments. The guidance will help organizations reduce the likelihood that a threat attacker may retain…