#Chrome orion solarwinds code

A second possibility was that the hackers stole credentials, he said, while the third was a breach of a third-party application used by SolarWinds.ДЄlso Read: SolarWinds, Microsoft, FireEye, CrowdStrike defend actions in major hackДЄmong the alleged security lapses at SolarWinds that were raised at the hearing was the use of the password вЂњsolarwinds123.вЂќ A cybersecurity researcher said he notified SolarWinds in 2019 that the password - to one of its servers - had leaked online. The hackers may have used a technique called вЂњpassword spraying,вЂќ where the attackers вЂњsprayвЂќ passwords at a large volume of usernames. At the hearing, SolarWinds CEO Sudhakar Ramakrishna said the company was still investigating but had narrowed it to three possible methods. Far fewer were actually targeted for secondary attacks - about 100 companies and nine US agencies, according to the White House.ДЄ persistent question has been how the hackers originally breached SolarWinds.

#Chrome orion solarwinds code

The hackers implanted malicious code into SolarWindsвЂ™ popular Orion software, and as many as 18,000 customers received it while updating the software. The cyber-attack was revealed in December after FireEye discovered it while investigating a breach of its own. вЂњI believe that we have, over the history of time, taken security seriously - security of our internal systems, and the secure development of our products,вЂќ said Thompson, the former SolarWinds CEO.