Paul Volosen

In this engaging discussion, Paul Volosen, an Information Security Architect and VP at Mitsubishi UFJ Financial Group, dives into the alarming SolarWinds breach. He explains the Trojanized updates and their stealthy execution, highlighting the implications for Active Directory and identity access management. Paul reveals how attackers leveraged theft of private keys to impersonate users and outlines the broad international impact. He stresses the importance of monitoring vendor privileges and shares how MFA played a crucial role in the breach's discovery.