2 ms·
The wiki page on the attack speculates an Office360 account was hacked. Presumably it was an account from an admin, and from there I could see them probing unti
by matwood 6y ago
The wiki page on the attack speculates an Office360 account was hacked. Presumably it was an account from an admin, and from there I could see them probing until finding credentials for the build system.
- trashcan 6y agoNo idea if it is related, but a SAML implementation security issue was disclosed the same (or very close) day that the SolarWinds attack became public knowledge. Maybe that gave them access to the admin account?
- trulyme 6y agoSo they hacked MS through SW which was hacked through MS? Ironic if true.