#UNC2452

Kyle Hanslovan

KyleHanslovan

Only 1 / 67 antivirus engines list SUNBURST backdoor as malicious - SolarWinds.Orion.Core.BusinessLayer.dll https://www.virustotal.com/gui/file/32519b85c0b422e4656de6e6c41878e95fd95026267daab4215ee59c107d6c77/detection #SUNBURST #UNC2452 So

John Wetzel

johnwetzel

Let's talk about attribution. In a few weeks, we've gone from discovery of #SUNBURST and the #SolarWindsHack to public attribution of Russia. But there is currently scant public evidence for

Pete Bryan

MSSPete

@Mandiant have produced a great report on responding to the #Solorigate/#UNC2452 actor.It has some really useful guidance on detection and response that everyone should read (the guidance is much more

Costin Raiu

craiu

Looking at possible connections between #Sunburst and #Kazuar, a thread: #SolarWinds #UNC2452 #DarkHalo On Dec 21, 2020, as we were observing the great conjunction between Saturn and Jupiter, one of

Ean Meyer: Non-Profit Stonks and Stonk Accessories

EanMeyer

IR FOLKS - Look here - more in comments - If you are on a bridge right now... you need to jump on this GitHub... FireEye released signatures (Snort, YARA,

Elena RN ❦

Ek7_PRN

THREAD: Corrupted software provided by SolarWinds Worldwide LLC, and its connection with Dominion Voting Systems, casts shadow on the security of electronic voting systems used in 2020 Elections.Shoutout to @SpyGateDown

Maya Kaczorowski

MayaKaczorowski

Some observations on the SolarWinds supply chain attack, now that I'm all caught up!Just a rundown of what I learned - citations included, all opinions my own /1 (If

Roscoe B Davis🎖⭐️⭐️⭐️

RoscoeBDavis1

Question did @TuckerCarlson or @seanhannity or @IngrahamAngle even mention or dedicate a news block to what is quite possibly on of the largest hacks in US History? This hack involves

Kim Zetter

KimZetter

I have report from Microsoft about SolarWinds hack, including IoCs. Excerpts in this thread: "Microsoft security researchers recently discovered a sophisticated attack where an adversary inserted malicious code into a

Cyber Statecraft

CyberStatecraft

Since 2010, there have been at least 31 distinct attacks targeting updates in the software supply chain, of which 17 compromised build servers or altered code. Of those, more than

Nick Carr

ItsReallyNick

So you want to talk about the massive software supply chain intrusion & the most carefully-planned, complex espionage I’ve ever helped uncover?Start here: https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages

Jake

JCyberSec_

So where are we with SolarWinds Orion and what have we learnt since the original disclosure. A thread to pull public information together...1/n#SolarWinds #SolarWindsOrion A good thread to get a

Cyber Statecraft

CyberStatecraft

THREAD | A groundbreaking espionage operation targeting USG, the #Sunburst incident was also software supply chain compromise similar to 31 attacks observed since 2010. Using our Breaking Trust report @Cyberstatecraft

Dannielle (Dossy) Blumenthal PhD

DrDannielle

Sharing.https://twitter.com/17anonjohn/status/1340045540101419008 “What authority does POTUS have specifically over the Marines?”“only branch of service that falls directly under exec command”“Nati Sec Act of 1947, amended in 1952

Christopher Glyer

cglyer

2020 was full of major cyber events. Here is an end of year #ff thread of some of the most impactful people and research that I leveraged in my work

File411

File411

Analysis | The Cybersecurity 202: A Russian mega-hack is further damaging Trump’s cybersecurity legacy largest known Russian data theft in half a decade and is a sign Trump administration efforts

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.