Supernova Archives

New Supernova malware analysis reveals new APT cyberattack methods against vulnerable SolarWinds infrastructure

Cybersecurity Attacks, Malware, Network Security, Vulnerabilities & Exploits / Frank Crast / April 26, 2021 / APT, CISA, CVE-2020-10148, malware, Orion, SolarWinds, Supernova

The Cybersecurity and Infrastructure Security Agency (CISA) has published a new analysis report on Supernova malware used in a cyberattack and long term compromise of an entity’s network and SolarWinds systems.

New Supernova malware analysis reveals new APT cyberattack methods against vulnerable SolarWinds infrastructure Read More »

CISA releases new malware analysis on Supernova

Cybersecurity Attacks, Malware / Frank Crast / January 28, 2021 / CISA, CVE-2020-10148, DHS, malware, SolarWinds, Supernova

The Cybersecurity and Infrastructure Security Agency (CISA) has released new malware analysis on Supernova that affects unpatched SolarWinds Orion software.

CISA releases new malware analysis on Supernova Read More »

DHS issues new emergency guidance on SolarWinds Orion Code compromise

Cybersecurity Articles, Cybersecurity Attacks, Data Breach, Security Updates & Patches, Third-Party Security / Frank Crast / December 30, 2020 / CISA, CVE-2020-10148, DHS, malware, SolarWinds, Sunburst, Supernova, Zero-day

The Department of Homeland Security (DHS) has issued new emergency guidance on the SolarWinds Orion Code compromise and supply chain vulnerability.

DHS issues new emergency guidance on SolarWinds Orion Code compromise Read More »

SolarWinds releases updated advisory on SUPERNOVA malware (updated with CVE-2020-10148)

Malware / Frank Crast / December 29, 2020 / .NET, API, Cyberattack, malware, SolarWinds, Sunburst, Supernova, Unit 42, webshell

SolarWinds has released an updated security advisory on SUPERNOVA malware, a separate threat vector from the previously reported supply chain cyberattack that was based on SUNBURST backdoor malware. The update now includes new information on 0-day CVE-2020-10148 and PoC demo.

SolarWinds releases updated advisory on SUPERNOVA malware (updated with CVE-2020-10148) Read More »