The attack was carried out through a software supply chain starting with SolarWinds, and was discovered by another security company FireEye. So far nobody knows for sure just how extensive the breach was, what the Russians gained access to or what data they removed. The Risk to YouAccording to statements from SolarWinds, there were nearly 20 thousand customers who used the company’s software update in the March to June, 2020, time period when the update software was compromised. The SolarWinds security breach was only the beginning gettyChances are, you’re not a customer of SolarWinds. “To date, no zero-days associated to the breach were disclosed, the breach started unfortunately from the basics - poor password policy and security misconfigurations.

Source: Forbes December 24, 2020 12:56 UTC