After the threat actor behind the SolarWinds attack compromised the company's Orion network management product and leveraged it to break into target enterprise networks, the group often used a ...

One of the most chilling aspects of Russia's recent hacking spree—which breached numerous United States government agencies among other targets—was the successful use of a “supply chain attack” to ...

Critics, including a prominent U.S. senator, are pointing fingers at Microsoft for not warning customers about the Golden SAML security hole. Doing so might have headed off SolarWinds. Editor’s note: ...

A VMware vulnerability that allowed federated authentication abuse was used by the SolarWinds hackers to attack valuable targets, KrebsOnSecurity said. VMware said it didn’t have any indication of ...

Microsoft says that the end goal of the SolarWinds supply chain compromise was to pivot to the victims' cloud assets after deploying the Sunburst/Solorigate backdoor on their local networks. No new ...

Semperis, a pioneer in identity-driven cyber resilience, today announced that its security research team discovered a new variant of the notorious Golden SAML attack technique and dubbed it Silver ...

SAN FRANCISCO (Reuters) - Microsoft Corp's failure to fix known problems with its cloud software facilitated the massive SolarWinds hack that compromised at least nine federal government agencies, ...