Security News > 2020 > December > SolarWinds Hack Could Affect 18K Customers

Microsoft should soon have some idea which and how many SolarWinds customers were affected, as it recently took possession of a key domain name used by the intruders to control infected systems.

In a Dec. 14 filing with the U.S. Securities and Exchange Commission, SolarWinds said roughly 33,000 of its more than 300,000 customers were Orion customers, and that fewer than 18,000 customers may have had an installation of the Orion product that contained the malicious code.

The breach at SolarWinds could well turn into an existential event for the company, depending on how customers react and how SolarWinds is able to weather the lawsuits that will almost certainly ensue.

Vinoth Kumar, a cybersecurity "Bug hunter" who has earned cash bounties and recognition from multiple companies for reporting security flaws in their products and services, posted on Twitter that he notified SolarWinds in November 2019 that the company's software download website was protected by a simple password that was published in the clear on SolarWinds' code repository at Github.

Rew Morris, founder of the security firm GreyNoise Intelligence, on said that as of Tuesday evening SolarWinds still hadn't removed the compromised Orion software updates from its distribution server.

News URL

https://krebsonsecurity.com/2020/12/solarwinds-hack-could-affect-18k-customers/