SolarWinds -
'This implies that not only did the attackers have a high degree of familiarity with the software, but also the fact that its existing software release management system itself was compromised — as the class in question was modified at the source code level to build a new software update containing the backdoored library, then signed, and ultimately released to the customers.'
🤔 they were very familiar with software dev and release processes.
https://thehackernews.com/2020/12/new-evidence-suggests-solarwinds.html
@Dane You would think that a company in this business would have more extraordinary measures to ensure the integrity of their codebase. For instance, have a system with an air-gap do a periodic gap analysis that requires management approval. Sure, it's a lot of work, but should be table-stakes moving forward.