Internet2 Network Security SIG

[Paul Howell <>]

Hello Everyone,

Passing along an urgent security advisory regarding active exploitation of SolarWinds.   If you are using SolarWinds, then immediate actions are necessary to thwart compromise.  Please read the links noted below.

Regards,

Paul

Paul Howell

Chief Cyberinfrastructure Security Officer

Network Services, Internet2

100 Phoenix Drive, STE 111

Ann Arbor, MI 48108

Office: 734-352-4212

Email:

---

From: US-CERT <>
Sent: Sunday, December 13, 2020 11:30 PM
To: Paul Howell <>
Subject: Active Exploitation of SolarWinds Software

 

Active Exploitation of SolarWinds Software

12/13/2020 10:23 PM EST

Original release date: December 13, 2020

The Cybersecurity and Infrastructure Security Agency (CISA) is aware of active exploitation of SolarWinds Orion Platform software versions 2019.4 through 2020.2.1, released between March 2020 and June 2020.

CISA encourages affected organizations to read the SolarWinds and FireEye advisories for more information and FireEye’s GitHub page for detection countermeasures:

• SolarWinds Security Advisory
• FireEye Advisory: Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor
• FireEye GitHub page: Sunburst Countermeasures 
   

This product is provided subject to this Notification and this Privacy & Use policy.

Having trouble viewing this message? View it as a webpage.