The Verge editor-in-chief Nilay Patel joins CNBC's "Squawk Alley" team to discuss the cyberattack on U.S. agencies and corporations, including Microsoft. For access to live and exclusive video from CNBC subscribe to CNBC PRO: [ Ссылка ]
CISA said those behind the attack used network management software made by SolarWinds, a Texas-headquartered IT firm, to breach the government networks.
As many as 18,000 SolarWinds Orion customers downloaded a software update that contained a backdoor, which the hackers used to gain access to the networks.
CISA issued an “emergency directive” this week instructing federal civilian agencies to “immediately disconnect or power down affected SolarWinds Orion products from their network.”
But the perpetrators may have used other means to access the networks. CISA said Thursday is investigating “evidence of additional access vectors, other than the SolarWinds Orion platform.”
Microsoft was hacked in connection with the attack on SolarWinds’ widely used management software, Reuters reported Thursday.
Like with the cyberattack of SolarWinds, hackers infiltrated Microsoft products and then went after others, Reuters said, citing people familiar with the matter.
“We have been actively looking for indicators of this actor and can confirm that we detected malicious SolarWinds binaries in our environment, which we isolated and removed. We have not found evidence of access to production services or customer data,” a Microsoft spokesperson said in a statement shared with CNBC.
“Our investigations, which are ongoing, have found absolutely no indications that our systems were used to attack others,” they added.
Microsoft said that more than 40 client organizations were compromised in the attack.
“While roughly 80% of these customers are located in the United States, this work so far has also identified victims in seven additional countries,” Microsoft President Brad Smith said in a blog.
“This includes Canada and Mexico in North America; Belgium, Spain and the United Kingdom in Europe; and Israel and the UAE in the Middle East. It’s certain that the number and location of victims will keep growing.”
Smith added that “this is not espionage as usual” and “while governments have spied on each other for centuries, the recent attackers used a technique that has put at risk the technology supply chain for the broader economy.”
U.S. President-elect Joe Biden pledged Thursday to make cybersecurity a key area of focus for his administration.
“A good defense isn’t enough; We need to disrupt and deter our adversaries from undertaking significant cyberattacks in the first place,” Biden said in a statement issued by his transition team.
“We will do that by, among other things, imposing substantial costs on those responsible for such malicious attacks, including in coordination with our allies and partners. Our adversaries should know that, as President, I will not stand idly by in the face of cyber assaults on our nation.”
President Donald Trump, who has been silent about the hacking, threatened on Thursday to veto the National Defense Authorization Act, which includes money to help prevent such cyberattacks.
» Subscribe to CNBC TV: [ Ссылка ]
» Subscribe to CNBC: [ Ссылка ]
» Subscribe to CNBC Classic: [ Ссылка ]
Turn to CNBC TV for the latest stock market news and analysis. From market futures to live price updates CNBC is the leader in business news worldwide.
The News with Shepard Smith is CNBC’s daily news podcast providing deep, non-partisan coverage and perspective on the day’s most important stories. Available to listen by 8:30pm ET / 5:30pm PT daily beginning September 30: [ Ссылка ]
Connect with CNBC News Online
Get the latest news: [ Ссылка ]
Follow CNBC on LinkedIn: [ Ссылка ]
Follow CNBC News on Facebook: [ Ссылка ]
Follow CNBC News on Twitter: [ Ссылка ]
Follow CNBC News on Instagram: [ Ссылка ]
[ Ссылка ]
#CNBC
#CNBCTV
