The Straits Times says

Moment of reckoning for cyber security

New: Gift this subscriber-only story to your friends and family

While full details are yet to be known, the hostile cyber attack effected through the SolarWinds supply chain is clearly the most virulent in recent memory, and bookends a year when a malignant virus of another sort, the one that causes Covid-19, has dominated headlines. According to the Texas-based software company, the attackers compromised a server used to build updates for one of its platforms that support IT infrastructure management. Audaciously, they used this compromised server between March and June to insert backdoor malware into the products of leading companies such as Microsoft. Institutions targeted include the United States' Treasury, State and Homeland Security departments.

SolarWinds has said 18,000 customers downloaded the tampered software updates. The US Cybersecurity and Infrastructure Security Agency called it a "grave risk" to federal, state and local governments, as well as critical infrastructure and the private sector. Secretary of State Mike Pompeo and the US National Security Agency have blamed Russian state-sponsored malicious cyber actors for the attack, which was considered so serious that it prompted President Donald Trump's National Security Adviser Robert O'Brien to cut short an overseas trip and return to oversee daily crisis meetings at the White House.

Already a subscriber? 

Read the full story and more at $9.90/month

Get exclusive reports and insights with more than 500 subscriber-only articles every month

Unlock these benefits

  • All subscriber-only content on ST app and straitstimes.com

  • Easy access any time via ST app on 1 mobile device

  • E-paper with 2-week archive so you won't miss out on content that matters to you

Join ST's Telegram channel and get the latest breaking news delivered to you.

A version of this article appeared in the print edition of The Straits Times on December 22, 2020, with the headline Moment of reckoning for cyber security. Subscribe