1/3/2023 0 Comments Solarwinds![]() “Until such time as CISA directs affected entities to rebuild the Windows operating system and reinstall the SolarWinds software package, agencies are prohibited from (re)joining the Windows host OS to the enterprise domain,” the directive states. ![]() The directive is not optional and instructs agencies to leave the products disconnected from agency networks for the foreseeable future. The directive only applies to civilian agencies, as CISA does not have authority over the Defense Department or intelligence agencies. In the emergency directive-only the fifth in the agency’s history-CISA officials are requiring federal agencies identify instances of the SolarWinds software in their systems and “immediately disconnect or power down SolarWinds Orion products” by noon Monday, the alert states. However, federal agencies are instructed not to install-or reinstall-any instances of SolarWinds Orion until cleared by CISA, per an emergency directive issued late Sunday. On its site, the company issued an advisory urging clients to update to the latest version of the Orion software, 2020.2.1 HF 1, available through the customer portal. The attacks targeted Orion software versions 2019.4 HF 5 through 2020.2.1-the versions released between March 2020 and June 2020. Early reports suggest hackers working for the Russian government were involved in the breaches. ![]() News broke over the weekend that officials at CISA and the FBI were investigating breaches at two of the largest federal agencies-the Commerce and Treasury departments-related to a flaw in the SolarWinds Orion software. The Cybersecurity and Infrastructure Security Agency ordered all government departments by noon Monday to identify and shut off instances of SolarWinds Orion software running or connected to any government system, as agencies scrambled to mitigate potential damage from a critical vulnerability in software used by a huge swath of the federal government and military. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |