According to CISA, the hack also affected state and local governments.

The massive cyberattack launched by a suspected nation-state earlier this month is more pervasive than previously estimated says the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The hack, perpetrated through SolarWinds, also attacked computer systems used by state and local governments, critical infrastructure entities, and other private sector organizations. (npr)

CISA Alert on SolarWinds supply chain compromise

In its alert updated December 23, CISA says threat poses a grave risk to the Federal Government and state, local, tribal, and territorial governments as well as critical infrastructure entities and other private sector organizations.

“This is a patient, well-resourced, and focused adversary that has sustained long duration activity on victim networks,” CISA said. “CISA is investigating other initial access vectors in addition to the SolarWinds Orion supply chain compromise.”

US reaches out to intelligence alliance partners

CNN reports that White House National Security Adviser Robert O’Brien held a call on Tuesday with his counterparts in an international intelligence-sharing alliance called the Five Eyes Alliance.

The US, UK, Canada, Australia, and New Zealand are members of Five Eyes.

The call discussed the cyberattack on US government agencies and proposed a joint statement condemning the breach.

Microsoft investigates

It may be noted that Microsoft (NASDAQ: MSFT) said in a statement last week that “this latest cyber-assault is effectively an attack on the United States and its government and other critical institutions, including security firms.”

The computer giant also said that it found victims in seven additional countries. “This includes Canada and Mexico in North America; Belgium, Spain and the United Kingdom in Europe; and Israel and the UAE in the Middle East,” it said. “It’s certain that the number and location of victims will keep growing.”

Related Story:  Hackers, Suspected Of Russian Origin, Breach The U.S. Treasury