2020 SolarWinds supply chain (nation-state)

2020 Unknown records affected

Data compromised

Details not publicly disclosed

Technical writeup

Nation-state actors compromised SolarWinds Orion software; Microsoft and other enterprises were targeted via the supply chain. Microsoft's own systems were accessed; scope of data access was limited but significant for government and tech targets.

Root cause

Supply chain compromise of SolarWinds Orion; trusted software update mechanism abused.

References

https://www.microsoft.com/security/blog/2020/12/17/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack/