I know there’s a desire to calm people down and have some confidence, but I would advise anyone pretending they have an understanding of the scope of the SolarWinds compromise to dial it down a bit. It’s going to take time, could be more accesses, and our collection isn’t great.
E.g. “right now there are only $X orgs that are impacted” is based on very limited visibility with an expectation we understand all the compromise routes and adversary command and control capabilities. We simply don’t know that to be true and won’t in the first couple weeks
Should average citizens be freaking out? No, this isn’t war stop the hyperbole. From a national security perspective though the President and Congress must have confidence in the integrity of its critical and defense critical sites. We’re no where near “we understand this” yet.
I’ve been advising some members of Congress privately and it’s insane the number of bad hot takes are reaching them from Infosec and media. “This is digital Pearl Harbor” to “this isn’t impactful it’s only 50 companies.” Extremes don’t help right now.
Also as an aside I don’t care your political party - next time you see a Congressional staffer buy them a coffee or give an air hug - these folks are non stop working to try to keep folks on track and armed with good info on the Hill, staffers are super under-appreciated
• • •
Missing some Tweet in this thread? You can try to
force a refresh
