SolarWinds

The SolarWinds cyberattack, discovered in December 2020, was a highly sophisticated and targeted espionage operation. It compromised the software development process of SolarWinds, a major US company that provides software for monitoring and managing network infrastructure. The attackers managed to insert a malicious code into SolarWinds' Orion software updates, allowing them to potentially access the networks of thousands of SolarWinds' customers, including numerous US government agencies and Fortune 500 companies. This led to a significant breach of sensitive information and put national security at risk. The attack is notable for its scale, sophistication, and the high profile of the targeted entities. It highlighted the vulnerability of supply chain attacks and raised serious concerns about cybersecurity practices and national defense. The repercussions of the attack are far-reaching, prompting a reevaluation of cybersecurity policies and measures across the private and public sectors.

Source: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC10803091/

"id": "sol327050424",
"linkid": "solarwinds",
"type": "Vulnerability",
"date": "12/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"