Microsoft yakaburitsa zvimwe zvekuwedzera nezvekurwisa izvo zvakakanganisa zvigadzirwa zve SolarWinds iyo yakagadzirisa yekunze kumashure pane iyo SolarWinds Orion network masisitimu manejimendi manejimendi, iyo yaishandiswa paMicrosoft yemakambani network.
Kuongororwa kwechiitiko ichi kwakaratidza izvo vanorwisa vakawana mukana wekuwana maakaundi emakambani eMicrosoft uye panguva yekuwongorora, zvakaratidzwa kuti maakaundi aya aishandiswa kuwana zvinyorwa zvemukati neMicrosoft kodhi yechigadzirwa.
Zvinopomerwa izvozvo kodzero dzemaakaundi akanganiswa dzakangobvumidzwa kuona kodhi yacho, asi ivo havana kupa kugona kuita shanduko.
Microsoft yakavimbisa vashandisi kuti kumwe kuongorora kwakasimbisa kuti hapana shanduko yakaipa yakaitwa kudura.
Uyewo, hapana maratidziro evarwisi 'kuwana Microsoft data yevatengi yakawanikwa, kuyedza kukanganisa masevhisi akapihwa uye kushandiswa kwezvivakwa zveMicrosoft kuita kurwisa kune mamwe makambani.
Kubva pakurwiswa kweSolarWinds kwakatungamira mukuunzwa kwemusuwo wekunze kwete chete paMicrosoft network, asi zvakare mune mamwe makambani mazhinji uye masangano ehurumende uchishandisa SolarWinds Orion chigadzirwa.
Iyo SolarWinds Orion yekumashure yekugadzirisa yakaiswa muzvivakwa zvevanopfuura zviuru gumi nezvinomwe zvevatengi kubva kuSolarWinds, kusanganisira mazana mana nemakumi mashanu nemashanu evakakanganiswa Fortune 425, pamwe nemasangano makuru ezvemari nemabhangi, mazana emayunivhesiti, mapoka mazhinji emauto eUS neUK, White House, NSA, Dhipatimendi reUnited States. USA neParamende yeEuropean.
SolarWinds vatengi vanosanganisirawo makambani makuru seCisco, AT & T, Ericsson, NEC, Lucent, MasterCard, Visa USA, Level 3 uye Nokia.
Imba yekumashure yakabvumidza kure kupinda kune yemukati network yevaSolarWinds Orion vashandisi. Shanduko yakaipa yakatumirwa neSolarWinds Orion vhezheni 2019.4 - 2020.2.1 yakaburitswa kubva munaKurume kusvika Chikumi 2020.
Munguva yekuongorora kwezviitiko, kusaremekedza chengetedzo kwakabuda kubva kumakambani makuru evanopa masisitimu. Izvo zvinofungidzirwa kuti kuwana kune SolarWinds zvigadzirwa zvakawanikwa kuburikidza neMicrosoft Office 365 account.
Vanorwisa vakawana mukana wekuwana chitupa cheSAML chinoshandiswa kugadzira masiginecha edhijitari uye vakashandisa chitupa ichi kugadzira matokeni matsva aibvumidza mukana wekupinda netiweki yemukati.
Izvi zvisati zvaitika, munaNovember 2019, vekunze vekuchengetedza vaongorori vakacherekedza kushandiswa kwepassword diki "SolarWind123" pakunyora kupinda kune FTP server ine SolarWinds zvigadzirwa zvigadzirwa, pamwe nekudonha kwepassword yemushandi. kubva kuSolarWinds mune yeruzhinji git repository.
Pamusoro pezvo, mushure mekuonekwa kwekunze kwekunze, SolarWinds yakaramba ichigovera zvimisikidzo neshanduko dzakaipa kwechinguva uye haina kubva yabvisa chitupa chakashandiswa kusaina zvigadzirwa zvaro (nyaya yakamuka muna Zvita 13 uye chitupa chakamiswa muna Zvita 21 ).
Mukupindura kunyunyuta pane yambiro masystem akapihwa nehurongwa hwekuona malware, Vatengi vakakurudzirwa kuti vadzivise kuongorora nekubvisa nyevero dzenhema.
Izvi zvisati zvaitika, vamiririri veSolarWinds vakashoropodza iyo yakavhurwa sosi yekuvandudza modhi, vachifananidza mashandiro eakavhurika sosi yekudya forogo yakasviba uye vachitaura kuti yakavhurika yekuvandudza modhi haidziviriri kuoneka kwemabhukumaki uye chete yemhando yemhando inogona kupa. kudzora kodhi.
Uye zvakare, Dhipatimendi Rezvemitemo reUS rakaburitsa ruzivo kuti varwadzi vakawana mukana wekuseva tsamba yebazi zvichibva papuratifomu yeMicrosoft Office 365. Kurwiswa kwacho kunofungidzirwa kuti kwakaburitsa zvirimo mumabhokisi etsamba evamwe vashandi veMinistry ye3.000.
Kune avo chikamu, The New York Times uye Reuters, pasina kutsanangura kwainobva, yakashuma kuongorora kweFBI pane inogona kubatana pakati peJetBrains uye iyo SolarWinds kubatanidzwa. SolarWinds yakashandisa iyo TeamCity inoenderera yekubatanidza system inopihwa neJetBrains.
Izvo zvinofungidzirwa kuti varwisi vanogona kunge vakawana mukana nekuda kwekusagadzika zvisirizvo kana kushandiswa kwechinyakare vhezheni yeTeamCity ine kusasimba kusati kwatarwa.
JetBrains director akarasa fungidziro nezve kubatana yekambani ine kurwiswa uye yakaratidza kuti havana kutaurwa nevamiriri vemitemo kana vamiririri veSolarWinds nezve kuzvipira kunogona kuitika neTeamCity kune SolarWinds zvivakwa.
mabviro: https://msrc-blog.microsoft.com