SolarWinds: What Really Happened?
summary
A software build is trojaned with the Sunburst backdoor, attackers doing reconnaissance as early as January 2019 and remaining undetected until December 2020, when forensic analysis shows hundreds of terabytes and thousands of build systems inspected. An estimated ~18,000 customers downloaded the compromised update, including multiple US agencies and some Microsoft assets. Response centers on Orion Assistant Program — partner-led, company-funded remediation and upgrades — plus increased transparency, retention of the security lead, and admitting a weak media posture.
AI-written summary · about
chapters (4)
- 0:00Start
- 7:39Product Security and Incident Response Team
- 8:41How Are You Supporting Your Customers
- 9:40Orion Assistant
related talks
40mInside the Mind of the SUNBURST Adversary
12mAs Strong As the Weakest Link: Securing the Software Supply Chain
58mAttacking through the Software Supply Chain
37mThe SolarWinds Hack and the Executive Order on Cybersecurity happened
37mKeynote: Project Trebuchet: How SolarWinds is Using Open Source to Secure Their Supp...
01h 01mMonday Keynote: Perseverance, Growth and Success. The Sunburst Story from the CISO perspective.
34mThe SolarWinds Supply Chain Compromise
54mSupply Chain Security for OpenSource Projects