Displaying items by tag: Supply chain attacks

Microsoft and security firm FireEye's Mandiant Threat Intelligence division have published further details about the SolarWinds attacks, but neither company has fully verified the claims they make.

American cyber security company FireEye says it has identified a killswitch which will stop malware that was planted in the Orion network monitoring software, made by the Texas firm SolarWinds, from operating under certain conditions.

Improvements in patching hygiene have led criminals to divert their attention away from browsers and turn instead to supply chain weaknesses, according to a security vendor.