Threat Source newsletter (March 11, 2021) — Featuring new Solar Winds roundtable
Summary: Cisco Talos published a roundtable of its incident responders, global threat intelligence researchers and Outreach team discussing the SolarWinds supply chain attack and what remains uncovered. The same newsletter covers Microsoft's monthly security update, which disclosed 89 vulnerabilities including 14 critical, three of them the Exchange Server flaws Microsoft said state-sponsored actors exploited in the wild to steal emails.
What's compelling: Microsoft attributed the Exchange Server attacks to a newly identified actor called HAFNIUM, which it said usually targets military contractors, infectious disease research, legal, education and think tanks, and which Microsoft stated is likely based out of China while relying on leased virtual private servers in the U.S.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026