IronNet’s analysis of the SolarWinds SUNBURST breach highlights how sophisticated cyberattacks can exploit trusted software supply chains to gain widespread access to targeted networks. The attack, believed to be conducted by nation-state actors of Russian origin, affected approximately 18,000 SolarWinds customers worldwide by inserting malware into legitimate software updates. The objective was reportedly to gain access to sensitive government and organizational networks, particularly in the United States. Attackers used advanced techniques to conceal command-and-control communications, including mimicking normal SolarWinds Orion traffic and leveraging cloud providers to appear as trusted sources. IronNet demonstrates how its Behavioral Analytics and Collective Defense capabilities can id

Join for free to read