Russia Is Hacking Our Government's Computers

Solar Winds, Probably Hacked by Russia, Serves White House, Pentagon, NASA, Newsweek

"Two unnamed sources told the outlet that the hackers entered U.S. systems through updates released by SolarWinds, a software company based in Austin, Texas that also provides services to the White House, Pentagon and NASA, according to their website. Additionally, the company provides services to the country's leading telecommunications providers, as well as "more than 425 of the U.S. Fortune 500."

CISA Issues Emergency Directive To Mitigate The Compromise Of SolarWinds Orion Network Management Products, CISA

"The Cybersecurity and Infrastructure Security Agency (CISA) tonight issued Emergency Directive 21-01, in response to a known compromise involving SolarWinds Orion products that are currently being exploited by malicious actors. This Emergency Directive calls on all federal civilian agencies to review their networks for indicators of compromise and disconnect or power down SolarWinds Orion products immediately."

Keith's note: NASA has not said anything publicly about this. And if you ask them they won't say anything publicly about this. FWIW a cursory scan of recent reports on NASA IT efforts shows them to be lacking - in the extreme. So it stands to reason that they are concerned about this.

- Two Decade NASA CIO Struggle To Implement Effective IT Governance, earlier post
- Previous posts on NASA IT security

from NASA Watch https://ift.tt/3oRxIYe
via IFTTT