Commentary Addressing Risks and Opportunities Through the Lifecycle of Data, Technology, Advertising and Innovation

Data Counsel

Home | Data Counsel

<img class="alignright wp-image-6470" src="https://dataprivacymonitor.bakerhostetlerblogs.com/wp-content/uploads/sites/5/2021/01/GettyImages-1178228880-1200x630-72dpi.jpg" alt="" width="438" height="230" />

On December 13, 2020, SolarWinds disclosed that an unknown attacker compromised its network and inserted malicious code (referred to as the Sunburst vulnerability) into software updates for the Orion platform. In what will likely become known as one of the most widespread and damaging cyber attacks in history, approximately 18,000 private and government organizations installed the malicious code as part of their usual patching process. But based on current information, the attacker – which was likely a Russian intelligence service – used the vulnerability to infiltrate only a small fraction of the organizations that installed the malicious code. Therefore, most will find no evidence of further compromise.

<a href="/wp-content/uploads/2023/07/A-Risk-Based-Approach-to-the-SolarWinds-Vulnerability-Disclosures.pdf">Read more</a>

A Risk-Based Approach to the SolarWinds Vulnerability Disclosures