The vulnerabilities that allowed Russia’s SolarWinds hack have been known for decades
The most stunning thing about Russia’s latest hack of 18,000 computer networks—including those of at least six federal agencies, including the State Department, the Homeland Security Department, and the National Nuclear Security Administration—is not how sophisticated the attack was. It’s that these sorts of attacks are still happening—are still possible, in some cases easy—and that months can go by with nobody noticing them.
The awareness that something like this could happen dates all the way back to the dawn of the internet, when it was a Defense Department research-sharing project called the ARPANET.
Full article: The vulnerabilities that allowed Russia’s SolarWinds hack have been known for decades.