#SOLARWINDS HACK 2020 HOW TO#
#SOLARWINDS HACK 2020 SOFTWARE#

More importantly, it is hardly practical, especially for large enterprises. This approach is more art rather than science to say the least.

#SOLARWINDS HACK 2020 SOFTWARE#

At best, the solution is consistent with mining a sea of logs, monitoring network traffic and the targeted software behavior. However, there is no definite answer from the industry, yet. There have been a ton of blogs written about this very topic and a lot of high-priced consultants have been hired to help you answer this question. The JFrog Platform provides extensive logging, which has been integrated with widely used Log Analytics tools.

In this hypothetical case, the GUI provides you an interface to search for all the artifacts with the “orion*” pattern, and it looks like we are impacted by all the three infected SolarWinds libraries.įurthermore, you have visibility into how extensively each library is used (number of downloads), and by which user. Below is a visual representation for this result. The JFrog Platform Unified User Interface (GUI) is built on top of the JFrog Platform REST API. Since Artifactory provides the single source of truth for all the binaries within your enterprise, the question of whether you’re impacted by this breach can be easily answered by a simple API call/query within Artifactory. In the SolarWinds case, the three affected software binaries could be stored in a specific Generic Repository. After acquiring a commercial software product or an Open Source project, an enterprise typically will store the acquired binary in a repository within Artifactory, where it can be versioned and managed. With JFrog Artifactory, the JFrog Platform’s universal repository manager, you can determine if you’re impacted by the SolarWinds breach easily within seconds.Īrtifactory is used extensively within enterprises as their artifact database. Or you could have a size limitation on the DNS query logs, which would provide an incomplete history. However, you could have so many systems that checking each one could take years. If one or both of these conditions are met, your enterprise is impacted by the breach. Monitor your organization’s current DNS queries and mine the historic ones to determine if any DNS queries to hostnames contain the domain “avsvmcloudcom”.Examine every system within your enterprise to see if you currently have or previously had Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, or 2020.2 HF.Generally, there are two methods to determine if you’re impacted by the breach, and both are extremely difficult to implement:

Q1: Am I impacted by the SolarWinds breach?

#SOLARWINDS HACK 2020 HOW TO#

Read on to learn how JFrog can help you quickly and precisely assess if you’re impacted by this hack and how to undo the damage. The SolarWinds breach is an example of a supply chain attack - an increasingly popular type of breach in which hackers hide malware in legitimate software that’s distributed through official, trusted channels from vendors to their customers. For several months in 2020, SolarWinds inadvertently shipped product updates with the vulnerability, which was designed to help hackers compromise customers’ Orion servers using a backdoor.Īn estimated 18,000 customers received tainted updates, and several dozen got breached, including high-profile multinationals and large U.S. Hackers breached the systems of SolarWinds, an IT monitoring and management vendor, and injected malware into the software build process of its Orion Platform. How can I remediate the breached libraries/dependencies?.In this blog post, we’ll address three critical questions that are top of mind for CxOs, board members and IT chiefs about the SolarWinds breach, and explain how DevOps teams can answer them today with the JFrog DevOps Platform. While new details about its scope and impact continue to surface, public and private sector researchers keep probing it, as key questions about the attack still hang in the air. This destructive supply chain attack put the spotlight on software development security - a critical issue for the DevOps community. With software supply chain attacks on the rise, are you wondering how you can recover quickly from the recent SolarWinds breach at your company? Months after its discovery, the devastating SolarWinds hack remains a top concern for business, government and IT leaders.

Solarwinds hack 2020