SolarWinds Attack: 'This Hit the Security Community Hard'

3rd Party Risk Management , Application Security , Cybercrime as-a-service

RiskIQ CEO Lou Manousos Details Lessons to Learn in Supply-Chain Attack Aftermath Tom Field (SecurityEditor) • December 28, 2020    
Lou Manousos, CEO, RiskIQ

The SolarWinds breach is a case study in how attackers can subvert a widely used piece of software to turn it to their advantage, says Lou Manousos, CEO of RiskIQ.

See Also: The SASE Model: A New Approach to Security

"The magnitude of this attack is hard to overstate," Manousos says. "Having a supply chain vendor like this - with a legitimate program that is trusted - used to carry out an attack, it's just unprecedented.

"The number of organizations that have been hit, the types of organizations - some really advanced security programs - I think we're all shocked to see how the traditional protection that has been put in place just wasn't as effective as we would have liked when we have trusted software like this."

In this video interview with Information Security Media Group, Manousos discusses:

The impact of the SolarWinds breach;

The response from the public and private sectors;

Lessons to learn from this attack.

Manousos is CEO and co-founder of RiskIQ. As CEO, he has spearheaded a new approach that helps internet, financial services, healthcare, media and consumer pack ..

Support the originator by clicking the read the rest link below.