On December 13th, 2020, SolarWinds released a statement about a current and ongoing supply chain compromise surrounding the SolarWinds Orion products.
SolarWinds security advisory:
What is SolarWinds Orion?
SolarWinds Orion provides organizations with the ability to manage complex IT environments using a single product. Because of it’s abilities and powerful integration Orion has been selected by many organizations, including Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs), as their primary IT Management service.
A cyberattack into SolarWinds systems inserted a vulnerability into specific versions of the Orion software, which, if present and activated, could potentially allow an attacker to compromise the server on which the Orion products run.
There have been many recent, high-profile, cybersecurity breaches related to this supply chain compromise including security firm FireEye along with the US Treasury and Commerce departments.
This has lead Cybersecurity and Infrastructure Security Agency (CISA) to order all government departments to identify and shut off instances of SolarWinds Orion software running or connected to any government system.
No impact to techiest or it’s clients
While techiest, inc. utilizes services provided by SolarWinds we do not use any products included in the security incident or advisory. We are working closely with SolarWinds to determine if there has been any impact to services provided to us.
How techiest can help
techiest can help your organization determine if they have been impacted by the SolarWinds Cybersecurity incident. Our security professionals can search for affected versions of the Orion product on your network, or servers, and assist in shutting it off or upgrading it to versions not containing the Sunbust code.
If you are a government organization that has been ordered to shut off Solarwind’s Orion, techiest can provide alternate services to manage your IT Infrastructure. Our IT Management services provide monitoring and management, integrated security products including Antivirus and Webfiltering, along with the compliance and reporting you need.
Contact us to find out more.