Hacker News Reader

No, that was a separate incident: https://www.theregister.com/2020/12/16/solarwinds_github_pas...

From what I can tell, all we know is that the attackers definitely got into their build system (since the trojan was signed), and we know they moved laterally through exploits in various Microsoft products: https://en.wikipedia.org/wiki/2020_United_States_federal_gov...

Will we see the SEC issue proceedings against Microsoft?

Haha. I didn't follow it. After a bit of searching I had to laugh. They got owned by the 'hunter2' meme and call it a highly sophisticated and unforeseeable attack.

Well, all the subsequent steps after the initial breach were fairly fancy. But still, not a great posture overall.

Exactly... the initial foothold was a joke. And the bottom line is that important management folks were warned about serious issues many times.