The Week in Security: SolarWinds hack set off alarms for months before discovery
Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, ...
SolarWinds hack: Did DoJ know 6 months earlier?
What did the U.S. Justice Department know about the SolarWinds fiasco? How early did it find out? And who did it tell? ...
SolarWinds Detected Six Months Earlier
New reporting from Wired reveals that the Department of Justice detected the SolarWinds attack six months before Mandiant detected it in December 2020, but didn’t realize what it detected—and so ignored it ...
Beyond SolarWinds: 6 More Notable Software Supply Chain Attacks
SolarWinds has become almost a household name and for all the wrong reasons: beginning in 2019, the system management company was the target of one of the largest software supply chain attacks ...
SolarWinds and Market Incentives
In early 2021, IEEE Security and Privacy asked a number of board members for brief perspectives on the SolarWinds incident while it was still breaking news. This was my response. The penetration ...
The Week in Cybersecurity: SolarWinds attackers tap Google Drive, malware spreads via Play Store apps
Welcome to the latest edition of The Week in Cybersecurity, which brings you the latest headlines from both the world and our team about the most pressing topics in cybersecurity. This week: ...
The Boardroom Isn’t Ready for the Next SolarWinds
Attacks like Log4j, SolarWinds and Colonial Pipeline have board rooms across the nation questioning their preparedness in combating cybersecurity risks. What can boards do now to be more effective for the next ...
SolarWinds & Accellion Breaches: Supply Chain Attacks Wreaking Havoc
When it comes to cyber security, it’s not possible to pinpoint the biggest threat against organizations globally. However, supply chain attacks are doing their best to earn that honor. In a supply ...
How the SolarWinds Hack (almost) went Undetected
My lightning talk from the SEC-T 0x0D conference has now been published on YouTube. This 13 minute talk covers tactics and techniques that the SolarWinds hackers used in order to avoid being ...
