Forest Global Training Partners

Cyber Risks · Krebs on Security

Solar Winds Hack Could Affect 18K Customers

Summary: SolarWinds said in a Dec. 14 SEC filing that malicious code pushed through its Orion software update service may have reached fewer than 18,000 of its more than 300,000 customers, and that the intrusion also compromised its Microsoft Office 365 accounts. FireEye, which disclosed its own breach five days earlier with the theft of some 300 proprietary tools, published analysis indicating Orion was first compromised in March 2020, and attackers read email at the U.S. Treasury and Commerce departments and infiltrated DHS networks.

Bottom line: Orion products generated roughly $343 million, about 45 percent of SolarWinds' total revenue, and the stock fell 25 percent after disclosure - while CISA ordered every federal agency to disconnect the affected products, leaving open whether anyone turns the software back on.

Read the original at Krebs on Security ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026