Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
What We Know (and Don't Know) So Far About the 'Supernova' SolarWinds Attack
Newest First  |  Oldest First  |  Threaded View
theiman945
50%
50%
theiman945,
User Rank: Apprentice
4/7/2021 | 7:53:58 PM
The Enemy of My Enemy is My Friend
I believe the attacks could very well have been initiated by both Russia and China at the same time. And I also believe the primary target for Solar Winds was The US Treasury. I think the rest was collateral damage possibly with the exception of FireEye.

Russia has decided that they cannot compete with the United States on their own so they look to China as an ally. China does not see Russia as a threat so why not work with Russia to attack America any way they can?

Russia and China have figured out that they can do more damage to the United States economy with fewer repercussions through cyberwarfare then they can by firing missiles or dropping bombs. Just look at the recent incident where a ship got stuck in the Suez Canal. It backed up hundreds of ships costing Billions of dollars a day in maritime commerce. I have no evidence that this was caused by a cyber event but think how much easier it is to hack a container ships navigation system then to hack the Pentagon for instance. But the damage done and the cost associated will impact the United States to some degree. 

China is playing the long game and Xi Jinping has to consider what implications its actions may have as far as their relationship with the rest of the world. Putin just wants to go back to the good old days where the Soviet Union was truly a world power. People forget that Russia's economy is about the same size as France. The only reason they have leverage is due to the number of nuclear weapons they possess.


News
Inside the Ransomware Campaigns Targeting Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/2/2021
Commentary
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  3/30/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-27394
PUBLISHED: 2021-04-16
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions <...
CVE-2020-9667
PUBLISHED: 2021-04-16
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.
CVE-2020-9668
PUBLISHED: 2021-04-16
Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.
CVE-2020-9681
PUBLISHED: 2021-04-16
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction.
CVE-2021-26830
PUBLISHED: 2021-04-16
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.