Overview
A group that calls itself “Cozy Bear” gained access to government and private companies, including top security product firms, using a compromised update to SolarWinds' Orion software. This attack was so large it was deemed a “Grave Risk to Cyber Security.”
Analyzing the attack, there are three important highlights worth diving into a little deeper: