One of the most impactful attacks in recent years was the SolarWinds attack in 2021 that involved malware now known as Sunburst.
In a panel session at the RSA Conference 2022, Sudhakar Ramakrishna, president and CEO of SolarWinds was joined by Kevin Mandia, CEO of Mandiant, Jen Easterly, director, Cybersecurity and Infrastructure Security Agency (CISA) and moderator Niloofar Razi, Sr., operating partner, Energy Impact Partners. The panel discussed lessons learned from the SolarWinds incident and how government, security vendors and private companies can all work together to help improve security.
Easterly said that the initial SolarWinds attack was not discovered by SolarWinds or by the US Government it was discovered by Mandiant's predecessor company, FireEye.
"With the SolarWinds attack, even though it impacted many government agencies, it was discovered by a private sector company," Easterly said. "That really taught me the importance of building a model where the private sector and the government are working together collaboratively to put together the pieces of the puzzle."
SolarWinds Lessons Learned on Disclosure
Ramakrishna joined SolarWinds as its CEO just as the information about the attack was being discovered.
"Suffice it to say I joined the company in unusual circumstances," he said
No tags.