Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

New Delhi, Global cybersecurity firm <keyword id="1560274" type="COMPANY" weightage="20" keywordseo="FireEye">FireEye</keyword> that faced a data breach last week has revealed that hackers believed to be operating on behalf of a foreign government breached <keyword id="10431028" type="UNKNOWN" weightage="20" keywordseo="software-provider-solarwinds">software provider SolarWinds</keyword> and then deployed a malware in its <keyword id="10431030" type="UNKNOWN" weightage="20" keywordseo="orion-software">Orion software</keyword> to infect multiple US companies and government networks, including itself. The revelation came after the Washington Post reported on Sunday that a hacker group backed by the Russian government is behind data breaches at the Treasury and Commerce departments and other US government agencies. The group, known as APT29, or Cozy Bear, is also behind the attack on FireEye, accessing its internal network and stealing hacking tools the company uses to test the networks of its customers. According to FireEye, the global hacking campaign introduced a compromise into the networks of public and private organizations through the software supply chain. "This compromise is delivered through updates to a widely-used IT infrastructure management software -- the Orion network monitoring product from SolarWinds. The campaign demonstrates top-tier operational tradecraft and resourcing consistent with state-sponsored threat actors," said Kevin Mandia, FireEye CEO. The attacks required meticulous planning and manual interaction. "We believe it is critical to notify all our customers and the security community about this threat so organizations can take appropriate steps, FireEye said in a statement late on Sunday, adding that the company has updated its products to detect the known altered SolarWinds binaries. In a separate security advisory, SolarWinds said the attack was likely conducted by an outside nation state and intended to be a narrow, extremely targeted, and manually executed attack, as opposed to a broad, system-wide attack. "We are recommending you upgrade to Orion Platform version 2020.2.1 HF 1 as soon as possible to ensure the security of your environment. The latest version is available in <keyword id="10431029" type="COMPANY" weightage="20" keywordseo="the-solarwinds-customer-portal">the SolarWinds Customer Portal</keyword>". However, neither FireEye nor SolarWinds revealed how many customers were impacted due to the attack. "We are working to investigate the impacts of this incident and will continue to update you as we are made aware of any interruptions or impact to your business specifically," SolarWinds said. <keyword id="10387" type="COMPANY" weightage="20" keywordseo="Microsoft">Microsoft</keyword> has named the malware Solorigate and added detection rules to its Defender antivirus. FireEye has named the malware SUNBURST. SEE ALSO: <a href="https://www.businessinsider.in/stock-market/news/top-stocks-to-watch-future-retail-power-grid-cipla-delta-corp-yes-bank-adani-power-and-others/articleshow/79713824.cms">Top stocks to watch — Future Retail, Power Grid, Cipla, Delta Corp, Yes Bank, Adani Power and others</a> <a href="https://www.businessinsider.in/stock-market/news/burger-king-india-shares-nearly-doubles-on-listing-debut-pushes-valuation-past-4000-crore/articleshow/79715269.cms">Burger King India shares nearly doubles on listing — debut pushes valuation past ₹4,000 crore</a> <a href="https://www.businessinsider.in/business/startups/news/the-difference-between-doordash-zomato-and-swiggy-is-not-in-what-the-companies-do-its-where-they-do-it/articleshow/79715531.cms">The difference between DoorDash and Indian peers Zomato and Swiggy is not in what the companies do⁠ — it’s where they do it</a>

FireEye and Microsoft confirms SolarWinds supply chain attack

<ul class="summary-list"><li>The <keyword id="12250933" type="UNKNOWN" weightage="60" keywordseo="defense-department" source="Orion">Defense Department</keyword> relies on thousands of companies to create cutting-edge capabilities for US troops.</li><li>Those companies face growing threats in cyberspace, and the <keyword id="11897408" type="UNKNOWN" weightage="60" keywordseo="pentagon" source="Orion">Pentagon</keyword> is working to frustrate, disrupt, and defeat the adversaries behind them.</li></ul>The Department of Defense relies on the entrepreneurial companies and innovative, hard-working employees of the Defense Industrial Base (DIB) to create cutting-edge capabilities for our warfighters.Through procurement from private-sector sources, the department leverages the commercial sector's best technologies and innovations to provide our service members with the battlefield advantages they need to win decisively whenever called upon to fight.DIB <keyword id="6361948" type="UNKNOWN" weightage="60" keywordseo="cybersecurity" source="Orion">cybersecurity</keyword> is — and will — remain an expanding priority for the <keyword id="12118457" type="UNKNOWN" weightage="60" keywordseo="us-department-of-defense" source="Orion">US Department of Defense</keyword>. More than 220,000 companies provide value to the department's force development, and the DIB now faces increasingly sophisticated and well-resourced cyber-attacks that must be stopped.These cyberattacks, often backed by American adversaries, threaten the US and the rules-based order on which the global economy relies. Markets cannot function effectively in an environment where adversarial countries use their national power to steal intellectual property, sabotage commercial activity, and threaten supply chains.<div type="image" title="Lockheed Martin GPS III satellite" height="933" width="1400" msid="89436575" hostid="261"></div>Recent examples of malicious cyber activity, such as the Colonial pipeline ransomware attack and Solarwinds espionage campaign, show that our adversaries continue to evolve how they exploit cyberspace to steal sensitive information and disrupt systems.These adversaries are maneuvering to infiltrate where they can, especially where they see weak links in the cybersecurity of the supply chain.The size and complexity of the defense procurement ecosystem offers numerous paths for adversaries to access sensitive systems and information. New entry points are created daily as companies use technologies in new and innovative ways across supply chains.<h2>The DoD's approach to defense industrial base cybersecurity</h2><div type="image" title="Army depot computers cybersecurity" height="1202" width="1800" msid="89436578" hostid="261"></div>While every component of the department contributes to our cybersecurity, the DoD chief information officer is responsible for our cybersecurity strategies, plans, programs and governance processes, including the department's DIB cybersecurity strategy.DoD organizes DIB cybersecurity around four lines of effort to frustrate, disrupt, and defeat adversaries' efforts to infiltrate cyberspace. Those include:Incident reporting — The <a href="https://www.dc3.mil/">DoD Cyber Crime Center</a> (DC3) is the clearinghouse for the Mandatory Incident Reports (MIR) that are required by federal acquisition regulations. Any company that suspects intellectual-property theft or exploitation of entrusted controlled unclassified information has a duty to report it. In turn, DoD offers response and mitigation assistance to companies who have been breached, uses the attack intelligence gathered to assist other DIB companies, and performs programmatic assessments to determine the damage caused by the potential loss of intellectual property.Threat information and intelligence sharing — The department is committed to sharing information with private companies that hold some of our most sensitive information. With its advanced cryptology, signals intelligence, and cybersecurity capabilities, DoD serves as an invaluable partner to the private sector. A voluntary public-private cybersecurity partnership between DoD and DIB allows us to share information and intelligence through special events, intel sharing platforms, and regular communications. The department has two centers dedicated to making this effort stronger.<ul><li>First, the National Security Agency's <a href="https://www.nsa.gov/About/Cybersecurity-Collaboration-Center/">Cyber Collaboration Center</a> shares intelligence-informed indicators and cyber threat information to enable DIB partners to more effectively combat adversarial intrusions before they occur.</li><li>Second, the DC3 provides digital and multimedia forensics, specialized cyber training, technical solutions development, and cyber analytics for key mission areas. A critical function of DC3 is to provide non-attributional threat information reports to companies in the DIB CS program. DC3's Defense Industrial Base Collaborative Information Sharing Environment (DCISE) serves as the operational hub for the DIB's Cybersecurity Program. Any Cleared Defense Contractor interested in getting regular threat information and technical assistance should go to the <a href="https://dibnet.dod.mil/">DIB Cyber Incident Reporting &amp; Cyber Threat Information Sharing portal</a>.</li></ul>Cybersecurity technical assistance and collaboration — To help businesses improve their cybersecurity, the department has developed a variety of cybersecurity services. For instance, the <a href="https://www.dc3.mil/Organizations/DIB-Cybersecurity/DIB-Cybersecurity-DCISE/">DC3 DIB Collaborative Information Sharing Environment (DCISE) portal</a> allows access (with registration) to tools such as Krystal Ball, which provides DIB companies with automated "outside-in" assessment of their cybersecurity vulnerabilities.The site also contains useful self-assessment survey capabilities to aid DIB companies in understanding areas for improvement in their cybersecurity posture.The NSA <a href="https://www.nsa.gov/About/Cybersecurity-Collaboration-Center/">Cyber Collaboration Center</a> harnesses the power of cooperative industry partnerships to prevent and eradicate foreign cyber threats. NSA offers several capabilities to enhance DIB cybersecurity, such as <a href="https://media.defense.gov/2021/Mar/03/2002593055/-1/-1/0/CSI_Selecting-Protective-DNS_UOO11765221.PDF">Protective Domain Name </a><a href="https://media.defense.gov/2021/Mar/03/2002593055/-1/-1/0/CSI_Selecting-Protective-DNS_UOO11765221.PDF">Systems</a>, improved email security, and continuous external vulnerability scanning.These services and others are already improving cybersecurity readiness, resiliency, and compliance across DoD's supply chains. We plan to continue expanding the customer base for these offerings and to pursue additional new innovative cybersecurity solutions that will make it easier for businesses to adopt the right practices.DIB cybersecurity requirements and assessment mechanisms — The DoD has a responsibility to protect information important to national security that we have entrusted to the private sector.We are taking a "trust, but verify" approach that recognizes many small businesses are still building their cybersecurity capabilities.Recognizing that the initial approach to Cybersecurity Maturity Model Certification (CMMC) was driving unnecessary cost for industry, DoD revamped the program (<a href="https://www.acq.osd.mil/cmmc/index.html">CMMC 2.0</a>) to streamline requirements and processes, while protecting the defense industrial base from increasingly frequent and complex cyberattacks. With its streamlined requirements, CMMC 2.0 cuts red tape for small- and medium-size businesses, prioritizes the protection of DoD information that's necessary for national security, and reinforces cooperation between the DoD and industry in addressing evolving cyber threats.<h2>Conclusion</h2><div type="image" title="F-35 factory assembly line" height="1600" width="2000" msid="89436580" hostid="261"></div>Defense industrial base cybersecurity is and will remain an expanding priority for the US Department of Defense.With increased reporting, improved information sharing, technical assistance, and our revamped assessment mechanisms, we are committed to ensuring businesses can secure the nation's sensitive information when it is on their networks.Through these and other efforts, DoD seeks to strengthen national security through greater collaboration with the DIB.Hon. John Sherman is the chief information officer for the Department of Defense.

Defending the defense industrial base from cyberattacks requires more cooperation with industry

You Searched For "the solarwinds customer portal" and got 2 results

FireEye and Microsoft confirms SolarWinds supply chain attack

IANS

Defending the defense industrial base from cyberattacks requires more cooperation with industry

John Sherman

Popular Keywords

Buying Guides