SolarWinds controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile6 entries
2021
Microsoft discloses source-code access in SolarWinds attack
Issue disclosure
Microsoft said SolarWinds attackers downloaded limited source code from repositories containing components linked to Azure, Intune, and Exchange. The article also reports that Microsoft completed its investigation and found no evidence that the attackers abused its products or internal systems to attack customers.
Company response
Investigation — Microsoft
And now, ZDNet reported that Microsoft announced the investigation has been completed.
Source excerpt
However, the company confirmed that the data was not extensive and that the intruders only downloaded the source code of a few components linked to Azure, Intune, and Exchange, which are cloud-based products.
The tech giant company said that they found no evidence that the cybercriminals abused its official products or internal systems to shift and attack Microsoft's regular consumers and business customers.
Microsoft admitted that the SolarWinds hackers were able to acquire its codes for three of its big products.
2020
SUNBURST Orion supply-chain attack
Attackers compromised SolarWinds’ software distribution process and inserted the SUNBURST backdoor into legitimate Orion updates released during 2020. The updates reached thousands of customers, including United States government agencies and major private organizations. The operation remained undetected for months and became one of the most consequential software supply-chain compromises publicly identified.
2020
SUPERNOVA intrusion
Investigators identified a separate intrusion involving SUPERNOVA, a web-shell-like malware associated with changes to Orion-related code. It differed from SUNBURST in implementation and lacked the same digital-signature characteristics, suggesting a separate operation.
2020
Security-control and disclosure criticism
Reporting and subsequent investigations raised concerns about weak credentials, software-build security, the timing of disclosure, certificate revocation, security staffing, and the company’s broader security culture. SolarWinds disputed or qualified aspects of some reporting, while the incident generated sustained regulatory and legal scrutiny.
2020
Insider stock-sale allegations
SolarWinds’ share price fell sharply after the Orion compromise became public, while reports highlighted substantial insider stock sales made before public disclosure. A company spokesperson said the sellers were not aware of the breach at the time.
2020
Sunburst cyberattack involving SolarWinds software
Issue disclosure
A report described the Sunburst cyberattack, in which attackers infiltrated SolarWinds and hid malware in an Orion software update downloaded by customers. According to the report, SolarWinds functioned as a channel for the attack rather than as its actual target.
Source excerpt
The attackers were able to hide their malware in an update for the Orion software downloaded by about 18,000 SolarWinds customers.
The first attack by the hackers came when they infiltrated the US software firm SolarWinds in Austin, Texas, this spring.
SolarWinds provides technology for managing and securing computer networks and was not the actual target of the attack, but was instead used as a channel to carry out the attack.