Eric Geller

Eric Geller @ericgeller

Confirming earlier suspicions, FireEye says that its breach was part of a global campaign of cyberattacks leveraging a compromised SolarWinds Orion software update. FireEye is notifying victims it discovers. https://t.co/A0Tg0hkXFi Technical details: https://t.co/ddDPPXKSVw https://t.co/8cvMv3ENya — PolitiTweet.org

Eric Geller @ericgeller

@WilliamTurton @Bing_Chris more proof that 2020 is a simulation — PolitiTweet.org

Eric Geller @ericgeller

Solar Winds, IT firm used by federal agency victims, says "a highly-sophisticated, targeted and manual supply chain attack by a nation state" compromised the software updates released earlier this year for its Orion IT monitoring platform. https://t.co/Jw3t3eOOOx — PolitiTweet.org

Eric Geller @ericgeller

FBI and Treasury Department have not provided comments yet. — PolitiTweet.org

Eric Geller @ericgeller

NSC spokesman John Ullyot: “The United States government is aware of these reports and we are taking all necessary steps to identify and remedy any possible issues related to this situation.” — PolitiTweet.org

Eric Geller @ericgeller

NTIA referred to Commerce, which said: "We can confirm there has been a breach in one of our bureaus. We have asked CISA and the FBI to investigate, and we cannot comment further at this time." — PolitiTweet.org

Eric Geller @ericgeller

CISA statement: “We have been working closely with our agency partners regarding recently discovered activity on government networks. CISA is providing technical assistance to affected entities as they work to identify and mitigate any potential compromises.” — PolitiTweet.org

Eric Geller @ericgeller

Solar Winds' other government customers, per its website: Census Bureau, DOJ, Oak Ridge and Sandia National Labs, VA, Army, Air Force, Navy, and Marine Corps. https://t.co/NKIKB1elFS Plus state, local, educational, and foreign customers, e.g. Texas, NHS, and European Parliament. — PolitiTweet.org

Eric Geller @ericgeller

A bit more specificity on timing, per a U.S. official: Investigators believe that the hackers had been monitoring federal workers' emails since June. Fear is that "the same techniques…could have been leveraged against other agencies," since "everybody uses Microsoft products." — PolitiTweet.org

Eric Geller @ericgeller

"For the past six weeks, Trump has...forced Republican officials to opt between siding with him and the nation’s democratic process. Through public displays of support and lengthy silences, the vast majority of elected Republicans chose to back Trump." https://t.co/fQovP9cN28 — PolitiTweet.org

Eric Geller @ericgeller

From Reuters' story: "Hackers broke into the NTIA’s office software, Microsoft’s Office 365. Staff emails at the agency were monitored by the hackers for months..." The hackers were "able to trick the Microsoft platform’s authentication controls..." https://t.co/ULVSDaiG9G — PolitiTweet.org

Eric Geller @ericgeller

@nakashimae When FireEye announced its breach, it said that it was working with Microsoft to investigate. Seems possible that these attacks are connected in terms of technique not just perpetrator. — PolitiTweet.org

Eric Geller @ericgeller

.@nakashimae is reporting that Russia's foreign intelligence service, the SVR, is behind these federal agency intrusions: https://t.co/xobSD3OkVB The SVR was also reportedly behind the FireEye hack. — PolitiTweet.org

Eric Geller @ericgeller

The attack appears to have involved victims' Microsoft authentication tokens, raising concerns that the same techniques could be used on a wider scale. "This seems to be connected to microsoft in some way," U.S. official said. — PolitiTweet.org

Eric Geller @ericgeller

In addition to the FBI, CISA is providing support, and ODNI and U.S. Cyber Command have gotten involved. "When CyberCom starts getting involved in something, it's a big deal," U.S. official said. "The implication is that it's a nation-state confrontation." — PolitiTweet.org

Eric Geller @ericgeller

"The FBI's on site" at the Commerce Department, the parent agency of NTIA, per this official. Emergency NSC meeting yesterday, this person said. "It seems like it's gonna be a much bigger issue, but there's not a lot of firm understanding of how broad the scale is." — PolitiTweet.org

Eric Geller @ericgeller

Can confirm @Bing_Chris's report that several federal agencies incl NTIA are investigating breaches seemingly tied to nation-state hackers. "It's not entirely certainly what vulnerability they're using, how they got in, but it continues to be a problem," a U.S. official told me. — PolitiTweet.org

Eric Geller @ericgeller

@kristenkbates sure they don't — PolitiTweet.org

Eric Geller @ericgeller

@kristenkbates pecan say that again — PolitiTweet.org

Eric Geller @ericgeller

Can we just have one quiet weekend... — PolitiTweet.org

Eric Geller @ericgeller

If anyone needs me, I'll be watching this video on a loop for the rest of the day. https://t.co/8W8nVIo8OB — PolitiTweet.org

Eric Geller @ericgeller

Inject this straight into my veins, no pun intended. https://t.co/7XQdLFgje3 — PolitiTweet.org

Eric Geller @ericgeller

@lisabgeller omfg — PolitiTweet.org

Eric Geller @ericgeller

What a shot. — PolitiTweet.org

Eric Geller @ericgeller

Sick stuff. — PolitiTweet.org

Eric Geller @ericgeller

Hey @ChiefNewsham you up? https://t.co/GPnmfJB1IS — PolitiTweet.org

Eric Geller @ericgeller

Jesus Christ. https://t.co/QKieDzOhto — PolitiTweet.org

Eric Geller @ericgeller

@VileZero @lisabgeller THIS BLEP!!!!!! SLEEP BLEP — PolitiTweet.org

Eric Geller @ericgeller

@VileZero @lisabgeller Thank you! I miss you and Jo and tbh most importantly COCO — PolitiTweet.org

Eric Geller @ericgeller

Freshly. Baked. COOKIES. 🍪🍪🍪🍪🍪🍪🍪🍪🍪🍪 They are incredible. Thanks @lisabgeller! https://t.co/hEY4jBhCSE — PolitiTweet.org