跳到正文
WorldBrand.AI

SolarWinds

争议事件

以下收录公开来源中与该品牌相关的争议事件。列出一条并不表示过错已经证实。

返回词条共 6 条

  1. 2021

    Microsoft披露SolarWinds攻击者访问其源代码

    问题披露

    Microsoft表示，SolarWinds攻击者从包含Azure、Intune和Exchange相关组件的代码库下载了有限的源代码。文章还称，Microsoft已完成调查，未发现攻击者滥用其产品或内部系统攻击客户的证据。

    品牌回应

    • 调查 — Microsoft

      And now, ZDNet reported that Microsoft announced the investigation has been completed.

    来源摘录

    • However, the company confirmed that the data was not extensive and that the intruders only downloaded the source code of a few components linked to Azure, Intune, and Exchange, which are cloud-based products.
    • The tech giant company said that they found no evidence that the cybercriminals abused its official products or internal systems to shift and attack Microsoft's regular consumers and business customers.
    • Microsoft admitted that the SolarWinds hackers were able to acquire its codes for three of its big products.
    来源

  2. 2020

    SUNBURST Orion供应链攻击

    攻击者入侵了SolarWinds的软件分发流程，并将SUNBURST后门插入2020年发布的合法Orion更新中。这些更新到达了数千名客户，包括美国政府机构和主要私人组织。该操作持续数月未被发现，成为公开识别的最具影响力的软件供应链入侵事件之一。

    来源

  3. 2020

    SUPERNOVA入侵事件

    调查人员发现了一个涉及SUPERNOVA的单独入侵，这是一种与Orion相关代码更改相关的类似Web Shell的恶意软件。它在实现上与SUNBURST不同，并且缺乏相同的数字签名特征，表明这是一个单独的操作。

    来源

  4. 2020

    安全控制和披露批评

    报道和随后的调查引发了对弱凭据、软件构建安全、披露时机、证书撤销、安全人员配置以及公司更广泛安全文化的担忧。SolarWinds对某些报道提出异议或限定，而该事件引发了持续的监管和法律审查。

    来源

  5. 2020

    内部人士股票出售指控

    Orion入侵事件公开后，SolarWinds股价大幅下跌，而报道强调了在公开披露前进行的重大内部人士股票出售。公司发言人表示，卖家当时并不知道该漏洞。

    来源

  6. 2020

    涉及 SolarWinds 软件的 Sunburst 网络攻击

    问题披露

    报道描述了 Sunburst 网络攻击：攻击者入侵 SolarWinds，并将恶意软件藏在客户下载的 Orion 软件更新中。报道指出，SolarWinds 是攻击渠道，而非实际目标。

    来源摘录

    • The attackers were able to hide their malware in an update for the Orion software downloaded by about 18,000 SolarWinds customers.
    • The first attack by the hackers came when they infiltrated the US software firm SolarWinds in Austin, Texas, this spring.
    • SolarWinds provides technology for managing and securing computer networks and was not the actual target of the attack, but was instead used as a channel to carry out the attack.
    来源