The FireEye/SolarWinds Cyber Attack | Security Insights Podcast: Ep. 1

The FireEye/SolarWinds Cyber Attack | Security Insights Podcast: Ep. 1

Mar 8, 2023

Ivanti Senior Director of Product Management, Chris Goettl, and former Chief Security Officer, Phil Richards, join host Adrian Vernon to discuss the recent cyber attack that affected many dozens of organizations around the world, including multiple U.S. government agencies. This is one of the largest-scale cyberattacks in recent history.

Some backstory about this attack:
On December 8, 2020, FireEye announced they had been breached. Within days, multiple U.S. agencies were being targeted, such as the departments of State, Treasury, Commerce, Energy and Homeland Security, as well as the National Institutes of Health.

Kevin Mandia, FireEye CEO, made a statement that implicated a nation-state actor “Based on my 25 years in cybersecurity and responding to incidents, I’ve concluded we are witnessing an attack by a nation with top-tier offensive capabilities. This attack is different from the tens of thousands of incidents we have responded to throughout the years. The attackers tailored their world-class capabilities specifically to target and attack FireEye. They are highly trained in operational security and executed with discipline and focus.”

On December 13, 2020, FireEye accidentally uncovered a supply chain attack when they found evidence that hackers had entered a backdoor in SolarWinds software and applied a trojan in SolarWinds Orion to seed malware. This was the start of the SolarWinds attack.

On January 5, 2021, a joint statement by the FBI, CISA, ODNI, and the NSA was released. It included their conclusion that the threat actor was likely a Russian group.

For Ivanti's full statement on this cyberattack, please visit: https://www.ivanti.com/blog/official-statement-on-solarwinds-and-fireeye-security-incidents

Ivanti finds, heals, and protects every device, everywhere – automatically. Whether your team is down the hall or spread around the globe, Ivanti makes it easy and secure for them to do what they do best.

👷‍♀️ Exceptional employee experiences
Any device. Any location. Ensure proactive, efficient service so employees can work how they want.

🔒 Security for the Everywhere Workplace
Work anywhere, secure everywhere, with a comprehensive and scalable security strategy.

🎯 Accurate, actionable asset insights
Build the big-picture view of your IT estate and turn visibility into value.

Learn more about Ivanti at https://www.ivanti.com/