Testimony
John Riggi, AHA senior advisor for cybersecurity and risk, testimony before the Senate Homeland Security and Governmental Affairs Committee on defending…
HC3 Threat Briefing TLP White – Beyond Orion: Other Vectors in the SolarWinds Hack
January 11, 2021
Please see the attached weekly threat brief from the HHS Health Sector Cybersecurity Coordination Center (HC3). This report provides a briefing on additional vectors in the SolarWinds hack and covers the following topics:
- BLUF: The hack goes beyond Orion
- SolarWinds Orion
- The SolarWinds Hack
- What is VMWare?
- December 7th National Security Agency (NSA) Alert
- December 17th NSA Advisory
- Krebs on Security and VMWare’s Response
- Multi-Factor Authentication (MFA) Compromise
- Danger to the HPH Sector
- Mitigations
- References
Key Resources
Related Resources
Special Bulletin
Federal agencies this morning are providing new information on an imminent ransomware threat to U.S. hospitals.
Special Bulletin
The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS)…
Issue Landing Page
The number of large-scale data breaches at American health care organization increased 65% from 2010 to 2016. As a result, federal agencies are increasing…
Guides/Reports
Trusted insiders, both witting and unwitting, can cause grave harm to your organizations facilities, resources, information, and personnel. Insider incidents…
Standards/Guidelines
Agent Tesla is an established Remote Access Trojan (RAT) written in .Net. A successful deployment of Agent Tesla provides attackers with full computer or…