The US pentagon is donkdown?

[desertrunner]

https://www.forbes.com/sites/thomasb...fux7ky_h_pM_qg

[sonatine]

its unclear what level of access the attackers gained at this point and unfortunately thats unlikely to change for anyone without considerable clearance.

but yeah this is the real deal. they compromised a build server at solarwinds. thats as bad as it gets for supply chain compromise.

punch line:

if fireeye hadnt discovered their breach, and sourced it successfully to a backdoor on their solarwinds deployment, this should could have gone on indefinitely.

cozy bear isnt here to play.

[desertrunner]

its unclear what level of access the attackers gained at this point and unfortunately thats unlikely to change for anyone without considerable clearance.

but yeah this is the real deal. they compromised a build server at solarwinds. thats as bad as it gets for supply chain compromise.

punch line:

if fireeye hadnt discovered their breach, and sourced it successfully to a backdoor on their solarwinds deployment, this should could have gone on indefinitely.

cozy bear isnt here to play.

I assume China is connected to this, what do you think?

[sonatine]

its unclear what level of access the attackers gained at this point and unfortunately thats unlikely to change for anyone without considerable clearance.

but yeah this is the real deal. they compromised a build server at solarwinds. thats as bad as it gets for supply chain compromise.

punch line:

if fireeye hadnt discovered their breach, and sourced it successfully to a backdoor on their solarwinds deployment, this should could have gone on indefinitely.

cozy bear isnt here to play.

I assume China is connected to this, what do you think?

cozy bear is russia. there isnt a lot of crossover/collaboration between the two APT collectives, if thats what youre asking. both governments tend to farm talent from local underground hacking groups in addition to the obvious military sources.

[dwai]

I assume China is connected to this, what do you think?

cozy bear is russia. there isnt a lot of crossover/collaboration between the two APT collectives, if thats what youre asking. both governments tend to farm talent from local underground hacking groups in addition to the obvious military sources.

rofl @ Russia, god you're a fucking drone


it's clearly CHINA JOE

[desertrunner]

More unverified info...