Seventy percent of companies in the U.S., U.K. and Singapore reported feeling the effect of the widespread SolarWinds hack, most of which felt a "slight impact," TechRepublic reports.
IronNet's 2021 Cybersecurity Impact Report showed that companies spent $12 million on average, or 11% of their annual revenues, in the aftermath of the SolarWinds attack, with the highest impact reported among those in the U.S.
The report also showed that 42% have adopted supply chain security changes following the attack and 81% reported having increased odds of sharing threat information with industry colleagues, while 67% and 50% began sharing more information with tech industry colleagues and government leaders, respectively. U.S. companies were less likely than those in Singapore to share information with governments, according to the report.
Respondents cited data privacy and liability concerns, absence of automated or standard peer information sharing mechanisms, and the possibility of outdated shared information upon receipt of other companies.
Jill Aitoro leads editorial for SC Media, and content strategy for parent company CyberRisk Alliance. She 20 years of experience editing and reporting on technology, business and policy.
The U.S. Commerce Department has been urged by Sen. Ron Wyden, D-Ore., to bolster the already robust proposed U.S. tech rules that would prevent the utilization of the country's surveillance tools in repressive countries amid concerns of potential gaps that could be exploited by such nations.
Such an intrusion has prompted automated delivery of the malicious lottie-player NPM package versions among users who obtained the library through third-party content delivery networks.
The collaboration offers enterprises a scalable solution that integrates automated public key infrastructure and certificate management to secure continuous integration and continuous delivery pipelines without slowing developer workflows.