#TEAMCITY SOLARWINDS SOFTWARE#
#TEAMCITY SOLARWINDS CODE#
#TEAMCITY SOLARWINDS PASSWORD#

It’s important to separate those organisations being attacked by the same entity and those who were affected by the tainted SolarWinds code. In fact, 30% of affected organisations were not SolarWinds customers at all. The same attacker has sought to compromise other organisations - testimony from Microsoft noted 60 clients with similar experiences.

#TEAMCITY SOLARWINDS PASSWORD#

While the company acknowledges this is truthful and states it should not have happened, this problem was not related to the attack, it held no Orion code, it was not part of the company’s domain (hence not subject to the complex password policy in place) and was shut down within the hour it was discovered.Īdditionally, some reporting has conflated the SolarWinds attack with the SolarWinds attacker.

For example, a separate and unrelated insecure FTP server with the password ‘SolarWinds123’ also came to light. While much that has been reported has been factual, the company states speculation and misinformation has also been reported online.

#TEAMCITY SOLARWINDS CODE#

'We have major world powers with very different visions of how the future should look,' said Torino.The attack on SolarWinds, whereby a sophisticated attacker modified the company’s tooling to inject code that then was shipped, had a far-reaching impact across major technology companies and US Government departments. The SolarWinds cyberattack combines technology vendors, the private sector and government which will further complicate how security in the supply chain should be managed. If TeamCity has somehow been used in this process, it could very well be due to misconfiguration, and not a specific vulnerability,' according to the company. ' It's important to stress that TeamCity is a complex product that requires proper configuration. And JetBrains acknowledged the possibility of a product compromise. StackShare data shows at least 250 companies use the TeamCity tool.

#TEAMCITY SOLARWINDS SOFTWARE#

' When the compromise comes through a backdoor in commonly used software or ubiquitous utilities and dependencies it can create an almost unpluggable hole downstream that could take years to fully remediate,' said Torino. It could have been any of us,' said Steve Torino, cyber risk assessor at CyberSaint. 'SolarWinds is one of the victims in this situation. With major technology companies investigating their involvements, including Microsoft and FireEye, supply chain security will be a primary focus for organizations this year. In response, the DOJ ' eliminated the identified method by which the actor was accessing the O365 email environment,' according to the statement.Īs further details from targeted organizations continue to unfold, security experts expect to identify more vendors involved in the breach. The agency said about 3% of Office 365 inboxes were compromised.

The Department of Justice, one of the federal agencies compromised in the cyberattack, found additional activity stemming from the SolarWinds hack involving access to the DOJ's Microsoft Office 365 email environment, according to a statement released Wednesday. 'This means that attackers likely surveyed the software supply chain of each target company years in advance … this patience then extended to the timing of the intrusion,' which granted the bad actors the ability to find other points of entry in vendors, said McClurg. SolarWinds' breach was a months-long campaign, requiring significant time of ' conscientious reconnoitering,' said John McClurg, senior vice president and CISO of BlackBerry and former FBI branch chief, in an email. ' At this time, we believe this was, and continues to be, an intelligence gathering effort,' officials said. security agencies formally attributed the attack to 'likely' Russian actors on Monday. In December, Microsoft found that while a large pool of Orion customers had evidence of initial malware, only a percentage had a followup payload executed. Microsoft last week confirmed the company's internal source code was viewed by malicious actors. When the SolarWinds hack came to light last month, it was viewed by industry experts as a gateway for a larger breach across its Orion customer base.

Teamcity solarwinds