Security News > 2020 > December > DHS orders federal agencies to update SolarWinds Orion platform
The Cybersecurity and Infrastructure Security Agency has ordered all US federal agencies to update the SolarWinds Orion platform to the latest version by the end of business hours on December 31, 2020.
CISA's Supplemental Guidance to Emergency Directive 21-01 demands this from all agencies using Orion versions unaffected in the SolarWinds supply chain attack.
"Agencies using non-affected versions must update to the new version."
Agencies using non-affected versions must update to the new version since Orion Platform versions 2019.4 HF6 and 2020.2.1 HF2 are designed to protect from both SUNBURST and SUPERNOVA malware.
"CISA will follow up with additional supplemental guidance, to include further clarifications and hardening requirements," the federal agency added.