Cyber Security

The sprawling SolarWinds hack by suspected Russian state-backed hackers is the latest sign of Moscow's growing resolve and improving technical ability to cause disruption and conduct espionage at a global scale in cyberspace.

Microsoft, one of the most high-profile targets of the SolarWinds hack, announced Thursday that hackers were able to access its source code, though they could not modify it. 

The CISA said last week that U.S. government agencies, critical infrastructure entities, and private groups were among those affected

The victims offer a small window into the sweeping scope of the hack, which could have ensnared as many as 18,000 of Austin-based SolarWinds Corp.'s customers, the company said, after hackers laced a routine software update with malicious code.

Peter Mandia, CEO of cybersecurity firm FireEye, called for the U.S. to establish a clear doctrine to put the world on notice that there will be consequences if foreign governments engage in cyberattacks.

Suspected Russian hackers who broke into U.S. government agencies also spied on less high-profile organizations, including groups in Britain, a U.S. internet provider and a county government in Arizona.

Cybercriminals are carrying out their usual scams in hopes of their biggest season yet

The suspected Russian hacking campaign that targeted U.S. government agencies and dozens of companies around the globe is a "moment of reckoning" that "illuminates the ways the cybersecurity landscape continues to evolve and become even more dangerous," Microsoft’s president is warning. 

The full extent of the attack is unknown, but the vulnerable company is reportedly connected to most government agencies and Fortune 500 companies.

The Trump administration has made no public statement about the breach.

Austin, Texas-based SolarWinds is at the forefront of one of the largest hacking operations in U.S. history. But until recently, few, if any, had heard of the company. 

Some of America’s most deeply held secrets may have been stolen in a disciplined, monthslong operation being blamed on elite Russian government hackers.