Cyber Security

One of the cybersecurity firms investigating the SolarWinds attack said that it has identified a third malware strain involved in the hack.

The siege is forcing organizations to pay closer attention to property and personnel risks, risk management experts say.

A prolific Russian hacker who stole data on over 100 million U.S. consumers was sentenced Thursday after admitting his involvement in one of the biggest thefts of consumer data from a U.S. financial institution in history. 

Shareholders claim SolarWinds' misleading statements resulted in "significant losses and damages" for investors who purchased shares between between Feb. 24 and Dec. 15, 2020.

The sprawling SolarWinds hack by suspected Russian state-backed hackers is the latest sign of Moscow's growing resolve and improving technical ability to cause disruption and conduct espionage at a global scale in cyberspace.

Microsoft, one of the most high-profile targets of the SolarWinds hack, announced Thursday that hackers were able to access its source code, though they could not modify it. 

The CISA said last week that U.S. government agencies, critical infrastructure entities, and private groups were among those affected

The victims offer a small window into the sweeping scope of the hack, which could have ensnared as many as 18,000 of Austin-based SolarWinds Corp.'s customers, the company said, after hackers laced a routine software update with malicious code.

Peter Mandia, CEO of cybersecurity firm FireEye, called for the U.S. to establish a clear doctrine to put the world on notice that there will be consequences if foreign governments engage in cyberattacks.

Suspected Russian hackers who broke into U.S. government agencies also spied on less high-profile organizations, including groups in Britain, a U.S. internet provider and a county government in Arizona.

Cybercriminals are carrying out their usual scams in hopes of their biggest season yet

The suspected Russian hacking campaign that targeted U.S. government agencies and dozens of companies around the globe is a "moment of reckoning" that "illuminates the ways the cybersecurity landscape continues to evolve and become even more dangerous," Microsoft’s president is warning. 

The full extent of the attack is unknown, but the vulnerable company is reportedly connected to most government agencies and Fortune 500 companies.

The Trump administration has made no public statement about the breach.