Cybersecurity Weekly: SolarWinds backdoor found, affects Microsoft and VMWare

Infosec_Sam

A new SUPERNOVA backdoor found in SolarWinds cyberattack analysis. Microsoft says its systems were also breached in the SolarWinds hack. VMware is the latest to confirm breach in SolarWinds hacking campaign. All this, and more, in this week’s edition of Cybersecurity Weekly.

1. New SUPERNOVA backdoor found in SolarWinds cyberattack analysis

While analyzing artifacts from the SolarWinds Orion supply-chain attack, security researchers discovered another backdoor that is likely from a second threat actor. Named SUPERNOVA, the malware is a webshell planted in the code of the Orion network, an applications monitoring platform, and enables adversaries to run arbitrary code on affected machines.
Read more »

2. Microsoft says its systems were also breached in massive SolarWinds hack

The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft. The unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, sophistication and impact than previously thought.
Read more »

3. VMware latest to confirm breach in SolarWinds hacking campaign

VMware is the latest company to confirm that it had its systems breached in the recent SolarWinds attacks but denied further exploitation attempts. The company said that the hackers did not make any efforts to further exploit their access after deploying the backdoor now tracked as Sunburst or Solarigate.
Read more »

For more news stories like these, check out the blog »