Keep your eyes on these

VERY IMPORTANT

Security Articles

RSS

Secondary Cluster - SolarWinds Intrusion

released on 2020-12-21 @ 04:52:02 PM
This pulse is a collection of additional, and potentially non supply-chain related activity in the SolarWinds compromise. This activity, based on SUPERNOVA and COSMICGALE may be a secondary actor or subgroup of the supply-chain operating adversary. While details are sparse, it is important to separate this activity from the supply-chain activity of UNC2452.