back

by throwoutway·2y ago·view on hn ↗
So a remote work backdoor had a vulnerability and now 1700 orgs (including federal agencies) were hacked since December? Is it too soon to compare this to solarwinds? After all they were both in December

> The program used by the agencies is called Ivanti Connect Secure, which allows employees to remotely connect to work.

> As news of the vulnerability has become widespread, at least 1,700 known organizations around the world have been hacked with it, Volexity has found.

1 comments
Solarwinds was a supply chain attack where the company itself was hacked first, trojanized an installer, and then let that installer released to eventually end up in the target organization. This is an exploit, not a supply chain attack in the same manner. I would not compare them.
I meant from a scale perspective not the manner