4 ms·

Would mark a major escalation in executive accountability... Still no criminal charges, though. >“Sunburst was a highly sophisticated and unforeseeable attack

Would mark a major escalation in executive accountability... Still no criminal charges, though. >“Sunburst was a highly sophisticated and unforeseeable attack that the United States government has said was carried out by a global superpower using novel techniques in a new type of threat that cybersecurity experts had never seen before,” a company spokesperson told Cybersecurity Dive in an emailed statement

dragonwriter 3y ago
> Would mark a major escalation in executive accountability... Still no criminal charges, though. If there was a criminal referral they wouldn’t announce it and any charges would usually sigbificantly trail civil enforcement action, judging from every other SEC civil + DOJ criminal action I’ve seen.
grun3 3y ago
Wasn't the root cause of this attack someone setting a prod system password to 'solarwinds123'? Not very sophisticated nor unforseeable. Not just any prod system... the one that distributed their trusted updates to their entire customer base I believe.
- donmcronald 3y ago
  Haha. I didn't follow it. After a bit of searching I had to laugh. They got owned by the 'hunter2' meme and call it a highly sophisticated and unforeseeable attack.
  - mlyle 3y ago
    Well, all the subsequent steps after the initial breach were fairly fancy. But still, not a great posture overall.
- miguelazo 3y ago
  Exactly... the initial foothold was a joke. And the bottom line is that important management folks were warned about serious issues many times.
- mac-chaffee 3y ago
  No, that was a separate incident: https://www.theregister.com/2020/12/16/solarwinds_github_password/ https://www.theregister.com/2020/12/16/solarwinds_github_pas... From what I can tell, all we know is that the attackers definitely got into their build system (since the trojan was signed), and we know they moved laterally through exploits in various Microsoft products: https://en.wikipedia.org/wiki/2020_United_States_federal_government_data_breach https://en.wikipedia.org/wiki/2020_United_States_federal_gov...
  - wharfjumper 3y ago
    Will we see the SEC issue proceedings against Microsoft?

dragonwriter 3y ago

> Would mark a major escalation in executive accountability... Still no criminal charges, though. If there was a criminal referral they wouldn’t announce it and any charges would usually sigbificantly trail civil enforcement action, judging from every other SEC civil + DOJ criminal action I’ve seen.

grun3 3y ago

Wasn't the root cause of this attack someone setting a prod system password to 'solarwinds123'? Not very sophisticated nor unforseeable. Not just any prod system... the one that distributed their trusted updates to their entire customer base I believe.

donmcronald 3y ago
Haha. I didn't follow it. After a bit of searching I had to laugh. They got owned by the 'hunter2' meme and call it a highly sophisticated and unforeseeable attack.
- mlyle 3y ago
  Well, all the subsequent steps after the initial breach were fairly fancy. But still, not a great posture overall.
miguelazo 3y ago
Exactly... the initial foothold was a joke. And the bottom line is that important management folks were warned about serious issues many times.
mac-chaffee 3y ago
No, that was a separate incident: https://www.theregister.com/2020/12/16/solarwinds_github_password/ https://www.theregister.com/2020/12/16/solarwinds_github_pas... From what I can tell, all we know is that the attackers definitely got into their build system (since the trojan was signed), and we know they moved laterally through exploits in various Microsoft products: https://en.wikipedia.org/wiki/2020_United_States_federal_government_data_breach https://en.wikipedia.org/wiki/2020_United_States_federal_gov...
- wharfjumper 3y ago
  Will we see the SEC issue proceedings against Microsoft?