A widely used software company could be the entry point for a huge hack in the United States

In a statement on its blog, JetBrains said it had not been contacted by government or security agencies.

“We have not been contacted by any government or security agency about this, and we are not aware of any investigation,” Maxim Shafirov, the company’s chief executive, said Wednesday. “If such an investigation is undertaken, the authorities can count on our full cooperation.”

SolarWinds confirmed on Wednesday that it used TeamCity software to help develop its software and was investigating the software as part of its investigation. The company said it has yet to confirm a definitive link between JetBrains and the breach and compromise of its own software.

SolarWinds said 18,000 customers downloaded its compromised software, but investigators believe Russia chose the network it accessed wisely, making it difficult to quickly assess the damage.

In the joint announcement, officials said they believe the Russian hackers stopped at 10 federal agencies, but an Amazon internal assessment, which looked at the hackers’ tools, estimates the total number of victims in government and the private sector could be more than 250. organizations.

Microsoft also announced on December 31 that its network had been hacked by the same intruders and confirmed that they had viewed the company’s source code. He did not specify which products may have been compromised. CrowdStrike, a security company, confirmed last month that it was unsuccessfully targeted through a company that sells software on behalf of Microsoft. These resellers help configure Microsoft software and often have broad access to customer systems, which Russian hackers could exploit on countless Microsoft customers.

The Justice Department did not learn of the vulnerability in its Microsoft Outlook email system and shut it down until Dec. 24, about 10 days after SolarWinds’ compromise of government computers became public knowledge, officials said. .


Source link

Comments are closed.