If the federal government issued orders to government agencies to shutdown operations to look for evidence of malware and indicators of compromise if they use SolarWinds, then non-government organizations using SolarWinds and run by TDS shitheads have a tough decision to make.
They can do the same and acknowledge that the threat is real, or they can continue operations and pretend like the CISA order is a bullshit ploy by GEOTUS. If the order is legit, these companies risk being owned with ransomware or even worse.
It smells like these assholes chose a middle ground of shutting down operations piecemeal to look for evidence without telling anyone, found indicators in their systems, and are trying to do a rolling cleanup of their systems. They are not telling anyone what they are doing because they want to suppress anything that makes President Trump look presidential.
It's a tool/ software that helps (does) the system monitoring and management in the event a system goes down, reports errors, etc. And apparently cyber attacks.
Imagine if you had a web site that could give you complete control of every computer in your network, or your business, and it can do that with or without alerting the user of the computer.
Want to search every computer in every office for specific files, or specific types of files, or files with specific kinds of data or specific words in them? Like secret/top secret/confidential etc.
Want to be able to run commands against every computer all at the same time, with super-admin priviliges?
Want to install an application or remove one?
Want to download files from every computer? Want to download a file, change a few things and then put it back? What if you changed the language of a contract, or a bill?
Want to run a command to connect to databases and export all the data? All the databases?
You can do this and much much more.
In the right hands it's a tool to mange everything and alert on potential problems before they become terrible, so you have time to fix it.
It's great for remote support. You can hop on someone's desktop, Mac, Windows, Linux, and help them with it.
In the wrong hands... if terrible is the size of a shoe box, this is a shoe box the size of China.
Well this is interesting. I work heavily with Solarwinds, but only in an environment that is airgapped to the basic internet. They've long considered network monitoring software to be a potential vector for cyber attacks.
Now ask why CISA is not mentioning that Dominion uses this same software.
does this explain what just happened to google?
Doubtful. Google runs their own software. And custom hardware.
Probably not related although if people think no foreign gov't has compromised Google in one way or another they would be very optimistic.
Welcome to the party. We’ve been digging for hours.
Could someone explain like I’m 5? Why do so many companies use solar winds? Are they saying the google outage was due to hacking?
If the federal government issued orders to government agencies to shutdown operations to look for evidence of malware and indicators of compromise if they use SolarWinds, then non-government organizations using SolarWinds and run by TDS shitheads have a tough decision to make.
They can do the same and acknowledge that the threat is real, or they can continue operations and pretend like the CISA order is a bullshit ploy by GEOTUS. If the order is legit, these companies risk being owned with ransomware or even worse.
It smells like these assholes chose a middle ground of shutting down operations piecemeal to look for evidence without telling anyone, found indicators in their systems, and are trying to do a rolling cleanup of their systems. They are not telling anyone what they are doing because they want to suppress anything that makes President Trump look presidential.
It's a tool/ software that helps (does) the system monitoring and management in the event a system goes down, reports errors, etc. And apparently cyber attacks.
It's mostly for windows clicky clicky users. Seen it a lot on vmware clusters.
Every linux distribution has much more powerful tools.
Imagine if you had a web site that could give you complete control of every computer in your network, or your business, and it can do that with or without alerting the user of the computer.
Want to search every computer in every office for specific files, or specific types of files, or files with specific kinds of data or specific words in them? Like secret/top secret/confidential etc.
Want to be able to run commands against every computer all at the same time, with super-admin priviliges?
Want to install an application or remove one?
Want to download files from every computer? Want to download a file, change a few things and then put it back? What if you changed the language of a contract, or a bill?
Want to run a command to connect to databases and export all the data? All the databases?
You can do this and much much more.
In the right hands it's a tool to mange everything and alert on potential problems before they become terrible, so you have time to fix it. It's great for remote support. You can hop on someone's desktop, Mac, Windows, Linux, and help them with it.
In the wrong hands... if terrible is the size of a shoe box, this is a shoe box the size of China.
I need the same explanation....
Isn't CISA the organization named in the EO?
Hey Ratcliffe................. include it in the report...............
Well this is interesting. I work heavily with Solarwinds, but only in an environment that is airgapped to the basic internet. They've long considered network monitoring software to be a potential vector for cyber attacks.
Krebs... paging mr. krebs!!!!
Me working for an MSP that sucks Solarwinds' dick instead to Datto RMM.