Webinar: SolarWinds Hack - Pearl Harbor of the Information Age
The biggest hack ever in the digitized world: at least two independently operating hacking companies have been building backdoors into digitally signed updates to SolarWinds network software since mid-2019.
(firmenpresse) - Apparently, government agencies and the world's largest companies across all industries (defense contractors, technology companies, banks, consultants, pharma/chemical, utilities, telecoms and commodities) in North America, Europe, Asia, the Middle East and also Germany have been affected - especially their cloud usage. There was access to classified data up to. This made it possible to manipulate not only IT but production control systems / OT also. The extent of the damage is not even foreseeable, the attacks go on – may be for years! However, US authorities such as the FBI and others are already calling the attack the 'Pearl Harbor of the information age' and are anticipating further attackers and attacks.
How exactly could this happen? And how can such attacks using zero-day-vulnerabilities and backdoors be detected?
softScheck GmbH recaps this latest incident and explains the latest insights. In order to get a deeper understanding of the attack, the procedure of such a hack will be shown by a presentation, where a backdoor is installed into a program via a signed update. Lessons will be drawn and explained how backdoors can be methodically identified and closed.
Agenda
1. introduction
2. solarwind hack
3. demo: installing backdoors
4. identifying backdoors
Date 2021: February 21 - 16:00 - 17:00
Duration: 60 minutes
Language: English
Nominal sum: 44 € (plus VAT)
Prerequisites: Basic IT knowledge
Delivery: This workshop is offered as a webinar and therefore completely digital. This saves you time compared to the classic workshop: There is no need to travel to and from the workshop. If required, we can also offer this in-house at the customer's premises. The number of participants is limited to 18.
Technical requirements: The workshop is conducted using the browser-based software BigBlueButton.
We recommend:
- A current and popular web browser (e.g. Mozilla Firefox - or also Google Chrome, Microsoft Edge).
- A fast and stable internet connection (preferably no WLAN)
- Headphones or speakers on your end device (desktop PC / laptop / tablet)
At the beginning of the webinar, we turn off all cameras and all microphones to protect your privacy. If you have any questions, you are of course welcome to ask them in text form in the chat, or with a short note very welcome in person - only for this we would turn on your camera and microphone after your explicit permission.
Registration and organizational questions:
https://www.softscheck.com/en/contact-us-en/#workshop-solarwinds
Themen in dieser Pressemitteilung:
Unternehmensinformation / Kurzprofil:
softScheck has been a successful service provider in the field of information security in Europe for over 10 years. Our core competencies range from classic penetration testing and compliance testing to security audits of software and IT infrastructure as well as support for the systematic development of secure software in accordance with ISO-27034.
The core of our service offering is a tool-supported, comprehensive security testing process for software and hardware, which covers the entire development process from the very beginning and checks and analyzes security aspects during design, implementation and deployment. In the design phase, Threat Modeling is used to examine the security architecture from an attacker's perspective and identify threats. Using Dynamic Analysis, we identify previously undetected errors and security vulnerabilities in the binary code in a semi-automated and cost-saving manner.
The systematic prevention, detection and defense of cyber attacks with target-oriented, forensic analyses of systems and networks using standardized methods are also part of softScheck's portfolio and have been successfully completed in numerous projects.
softScheck GmbH
Bonner Str. 108
53757 Sankt Augustin
+49 2241 255 43 0
info(at)softScheck.com
Datum: 02.02.2021 - 12:56 Uhr
Sprache: Deutsch
News-ID 628911
Anzahl Zeichen: 2948
contact information:
Contact person: Prof. Dr. Hartmut Pohl
Town:
Sankt Augustin
Phone: 49 (2241) 255 43-0
Kategorie:
Telecommunication
Typ of Press Release: Product
type of sending: send
Diese Pressemitteilung wurde bisher 202 mal aufgerufen.
Die Pressemitteilung mit dem Titel:
"Webinar: SolarWinds Hack - Pearl Harbor of the Information Age"
steht unter der journalistisch-redaktionellen Verantwortung von
softScheck GmbH (Nachricht senden)
Beachten Sie bitte die weiteren Informationen zum Haftungsauschluß (gemäß TMG - TeleMedianGesetz) und dem Datenschutz (gemäß der DSGVO).
