Software Engineering Radio - the podcast for professional software developers cover image

Episode 535: Dan Lorenc on Supply Chain Attacks

Software Engineering Radio - the podcast for professional software developers

00:00

SolarWinds Compromide - An Attack Against Solar Winds

The SolarWinds organization, it's a company that they make a whole bunch of different pieces of software. An attacker got a footprint on the actual build server. This is one where it waited some kind of random number of days after installation to avoid any immediate detection. And then it would start sniffing, collecting data and then uploading it to some endpoints.

Transcript
Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app