Security vendor SolarWinds says product updates were subverted by nation-state

Supply chain exploit linked to attacks on major US government agencies and FireEye, Russia’s Cozy Bear attack gang in the frame for the job

Security vendor SolarWinds’ “Orion” IT monitoring platform has been compromised, and speculation is swirling that it was used in attacks on major US government agencies that could also be linked to last week’s revalation that security vendor FireEye’s top hacking tools have been accessed.…

from The Register