U.S. Treasury, Commerce Depts. Hacked Through Solar Winds Compromise
Summary: Hackers believed to be working for Russia tampered with SolarWinds Orion platform software builds released between March and June 2020, monitoring internal email traffic at the U.S. Treasury and Commerce Departments. CISA issued an emergency directive ordering all federal agencies to disconnect affected Orion products, advising agencies to treat all hosts monitored by the software as compromised and assume further persistence mechanisms were deployed.
Key Takeaway: SolarWinds reports over 300,000 customers, including more than 425 of the U.S. Fortune 500, all ten top U.S. telecommunications companies, all five branches of the military, and the NSA - and FireEye says victims already span government, consulting, technology, telecom and extractive entities across North America, Europe, Asia and the Middle East.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026