SolarWinds Hack Infected Critical Infrastructure, Including Power Industry

THE HACKING CAMPAIGN that infected numerous government agencies and tech companies with malicious SolarWinds software has also infected more than a dozen critical infrastructure companies in the electric, oil, and manufacturing industries who were also running the software, according to a security firm conducting investigations of some of the breaches.

In addition to these companies, the SolarWinds software also infected three firms that provide managed services to critical infrastructure industries, says Rob Lee, a former critical infrastructure threat intelligence analyst for the NSA and CEO of Dragos, Inc., which specializes...