Friday 16 Apr 2021 @ 10:10
National Cyber Security Centre
Printable version

UK and US call out Russia for SolarWinds compromise

Russia’s Foreign Intelligence Service (SVR) responsible for intrusion of global software supplier.

An image illustrating a warning sign on a laptop screen.

The UK and US yesterday (15th April) revealed for the first time that Russia’s Foreign Intelligence Service (SVR) was behind a series of cyber intrusions, including the SolarWinds compromise.

The National Cyber Security Centre (NCSC), a part of GCHQ, assesses that it is highly likely the SVR was responsible for gaining unauthorised access to SolarWinds Orion software and subsequent targeting.

The US National Security Agency (NSA), Department of Homeland Security’s Cyber Infrastructure Security Agency (CISA) and the FBI have published a technical advisory with mitigation advice. Read the guidance in full.

The NCSC has previously published guidance for organisations on this compromise:

You can read the Foreign Secretary’s statement on this action in full on GOV.UK.

In addition, the UK government is making available further information about the SVR’s cyber programme, also on GOV.UK.

 

Channel website: https://www.ncsc.gov.uk/

Original article link: https://www.ncsc.gov.uk/news/uk-and-us-call-out-russia-for-solarwinds-compromise

Share this article

Latest News from
National Cyber Security Centre

UK and allies warn about shift in cyber attackers exploiting zero-day vulnerabilities

14/11/2024 11:05:00

NCSC and international partners share top 15 vulnerabilities that were routinely exploited by cyber attackers last year.

The 4th Republic of Korea-UK Cyber Dialogue held in London

08/11/2024 15:18:00

The 4th Republic of Korea (ROK)-United Kingdom (UK) Cyber Dialogue was held in London on 6 November 2024.

Cyber Essentials scheme marks a decade of boosting businesses’ cyber defences

28/10/2024 16:05:00

Following the 10 successful years of the Cyber Essentials scheme, more businesses urged to strengthen cyber security protections

Exploitation of vulnerability affecting Fortinet FortiManager

25/10/2024 09:20:00

The NCSC is encouraging UK organisations to take immediate action to mitigate a vulnerability affecting Fortinet FortiManager (CVE-2024-47575) and to follow the latest vendor advice.

NCSC warns of widening gap between cyber threats and defence capabilities

17/10/2024 09:05:00

Dr Richard Horne, CEO NCSC calls for greater global resilience against online security threats at Singapore International Cyber Week.

All UK schools offered free cyber service to protect against online threats

16/10/2024 16:15:00

Following the successful initial roll out of PDNS for Schools last year, all schools in the UK can now benefit from the enhanced cyber resilience service.

Team of British women to take part in international cyber event in Japan

08/10/2024 16:20:00

Being announced on Ada Lovelace Day, a team of CyberFirst Bursary alumni will be representing the UK at the inaugural Kunoichi Cyber Games taking place at the Code Blue cyber security conference in Tokyo.

Five Eyes cyber leaders provide threat briefing at major US conference

23/09/2024 09:25:00

NCSC CEO discusses how the global threat picture remains unpredictable at Aspen Cyber Summit with fellow cyber security leaders.

NCSC and partners issue advice to counter China-linked campaign targeting thousands of devices

19/09/2024 10:15:00

Joint advisory highlights the risk of malicious cyber actors exploiting internet-connected devices and gives mitigation advice.