{"id":30040,"date":"2020-12-17T16:53:47","date_gmt":"2020-12-18T00:53:47","guid":{"rendered":"https:\/\/lapost.us\/?p=30040"},"modified":"2020-12-17T16:53:47","modified_gmt":"2020-12-18T00:53:47","slug":"federal-government-finds-evidence-hackers-used-multiple-methods-to-access-agency-networks","status":"publish","type":"post","link":"https:\/\/lapost.us\/?p=30040","title":{"rendered":"Federal government finds evidence hackers used multiple methods to access agency networks"},"content":{"rendered":"

The Department of Homeland Security\u2019s (DHS) cybersecurity agency on Thursday warned of the \u201cgrave\u201d threat posed to federal systems by a recent massive espionage attack by a nation state, warning that the hackers used multiple methods to access the systems for months.<\/p>\n

The Cybersecurity and Infrastructure Protection Agency (CISA)\u00a0put out an alert<\/a>\u00a0detailing the attack, widely reported to be carried out by a Russian military hacking group, on IT company SolarWinds.<\/p>\n

By infiltrating a vulnerability in the company\u2019s Orion software, the group was able to access federal networks, with DHS, the Commerce, State and Treasury departments, and branches of the Pentagon among the agencies reportedly breached, with the hackers potentially having had access to the networks since March.<\/p>\n

The Washington Post reported Sunday that the group behind the attack is a Russian military group known as \u201cCozy Bear,\u201d a prolific hacking group that previously targeted the State Department during the Obama administration and\u00a0COVID-19 vaccine researchers<\/a>\u00a0earlier this year.<\/p>\n

\u201cCISA has determined that this threat poses a grave risk to the Federal Government and state, local, tribal, and territorial governments as well as critical infrastructure entities and other private sector organizations,\u201d the agency wrote in the alert.<\/p>\n

CISA, which put out an emergency directive earlier this week ordering all federal agencies to disconnect from SolarWinds software, warned that the hackers involved used other methods besides the SolarWinds vulnerability to access federal systems.<\/p>\n

\u201cCISA has evidence of additional initial access vectors, other than the SolarWinds Orion platform; however, these are still being investigated,\u201d the agency wrote.<\/p>\n","protected":false},"excerpt":{"rendered":"

The Department of Homeland Security\u2019s (DHS)...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-30040","post","type-post","status-publish","format-standard","hentry","category-science-tech"],"_links":{"self":[{"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts\/30040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=30040"}],"version-history":[{"count":1,"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts\/30040\/revisions"}],"predecessor-version":[{"id":30041,"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts\/30040\/revisions\/30041"}],"wp:attachment":[{"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=30040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=30040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=30040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}