We commend FireEye for being transparent in their disclosure of the breach and countermeasures in an effort to ensure the security of other organizations across the world.Īt this time, there is no evidence or reason to believe that the FireEye breach or the theft of the red teaming tools has impacted any Trustwave customers or partners.įireEye has also indicated that the attackers attempted to access information on internal systems related to 'government customers' specifically, but there has been no evidence of data exfiltration from the affected systems. 8, 2020.Īs you may be aware, FireEye has explicitly stated that malicious attackers have stolen red team tools, both open-source and FireEye developed, which are commonly utilized for ethical hacking engagements. We wanted to share the plans and procedures we've put in place in response to the FireEye breach that was made public on Dec. 23 to provide more information about Trustwave’s response to the FireEye tools breach and SolarWinds Orion platform compromise, as well as additional clarifications to Trustwave’s non-use of affected versions of SolarWinds Orion. 31 to provide more information about the SUPERNOVA malware and Trustwave product protections. 15 to include more information about Trustwave product protections for the SUNSPOT malware and CVE-2020-10148. 26 to include more information about Trustwave product protections for the Raindrop malware. This blog post was updated March 17 to include information on new Trustwave IDS updates.

What is orion solarwinds