{"id":38915,"date":"2020-12-14T18:40:06","date_gmt":"2020-12-14T18:40:06","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/"},"modified":"2020-12-14T18:40:06","modified_gmt":"2020-12-14T18:40:06","slug":"backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/","title":{"rendered":"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector"},"content":{"rendered":"

Concern is gathering over the effects of the backdoor inserted into SolarWinds’ network monitoring software on Britain’s public sector \u2013 as tight-lipped government departments refuse to say whether UK institutions were accessed by Russian spies.<\/p>\n

As reported<\/a> in the small hours of this morning by The Register<\/i>, it appears the downloads page for SolarWinds’ Orion Windows monitoring platform was altered by Kremlin hackers \u2013 known as APT29, aka Cozy Bear \u2013 so that victims fetched and installed a tampered-with version that included a remote-control backdoor.<\/p>\n

This malicious code was detailed<\/a> by FireEye, which itself said it was earlier hacked<\/a> by state-level miscreants. Said victims of the Orion job are said to include the Treasury and the Dept of Commerce at the US government. It’s not clear at this stage whether FireEye was also hacked via a dodgy Orion install.<\/p>\n

Research by The Register<\/i> has shown that SolarWinds’ Orion is used widely across the British public sector, ranging from the Home Office and Ministry of Defence through NHS hospitals and trusts, right down to local city councils.<\/p>\n

A job advert for the MoD’s Corsham tech bunker lists<\/a> SolarWinds as one of the tools used by a third-line software support engineer; similarly, a network design engineer job<\/a> with the MoD’s Defence Equipment and Support agency posted in May also listed SolarWinds proficiency as a “nice-to-have” skill.<\/p>\n

\"A<\/a><\/p>\n

A list of SolarWinds’ UK customers taken from a marketing presentation issued by the company. Click to enlarge.<\/p>\n<\/div>\n

SolarWinds’ products are in regular use in the Royal Navy and Royal Air Force, with the agency also counting GCHQ, the Cabinet Office, and the Ministry of Justice among its customers. Most concerningly, a company brochure<\/a> [PDF] also stated that the MoD’s Defence Equipment and Support agency was a SolarWinds customer. DE&S is the agency that maintains Britain’s high-tech fighter jets, submarines, and warships.<\/p>\n

Local governments also facing possible storm<\/span>
\n<\/h3>\n

Down at local government level, the three London boroughs of Brent, Lewisham, and Southwark all use SolarWinds Orion as part of a joint backend IT venture. Meeting minutes<\/a> [PDF] from July revealed: “The service has also standardised on the Orion SolarWinds monitoring product, initially for the network infrastructure, but this will be expanded to cover other key components such as server compute and storage.”<\/p>\n

Other councils around the country also use the product, with the National Cyber Security Centre (NCSC) advising orgs using it to “have these instances installed behind firewalls, disabling internet access for the instances, and limiting the ports and connections to only what are critically necessary”.<\/p>\n

Yet government departments fobbed off El Reg<\/i>‘s questions about the hack, referring us to the NCSC’s public statement, which merely said it was “working closely with FireEye and international partners on this incident.”<\/p>\n

Microsoft has published a detailed technical blog<\/a> about the SolarWinds compromise, speculating that the Russians may have “compromised internal build or distribution systems of SolarWinds, embedding backdoor code into a legitimate SolarWinds library with the file name SolarWinds.Orion.Core.BusinessLayer.dll”. SolarWinds’ customers are being urgently advised by the firm to upgrade to Orion Platform version 2020.2.1 HF 1 “as soon as possible to ensure the security of your environment.”<\/p>\n

And speaking of Microsoft, SolarWinds, in a filing [PDF<\/a>] to America’s securities watchdog, said its Office 365 email and productivity suite account was hacked, which could have led to the quiet tampering of its downloads. SolarWinds also said of its more than 300,000 customers, up to 18,000 of them installed the dodgy Orion update \u2013 said to include America’s Homeland Security among other US government bodies.<\/p>\n

The normally talkative cybersecurity sector has been practically silent about the FireEye hack, which sources suggested to The Register<\/i> was because smaller firms are scared of being seen to criticise one of the industry’s largest players. Meanwhile, the NCSC’s refusal to answer any questions about the breach suggests its impact may well be larger than officials want to admit.<\/p>\n

Nuke it from orbit<\/span>
\n<\/h3>\n

The US government’s Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive<\/a> on Sunday evening calling for an immediate IT lockdown by government agencies: specifically, pull the plug on anything running Orion.<\/p>\n

“Affected agencies shall immediately disconnect or power down SolarWinds Orion products, versions 2019.4 through 2020.2.1 HF1, from their network,” the directive stated.<\/p>\n

“Until such time as CISA directs affected entities to rebuild the Windows operating system and reinstall the SolarWinds software package, agencies are prohibited from (re)joining the Windows host OS to the enterprise domain.”<\/p>\n

In addition, Uncle Sam’s IT admins are told to block all incoming and outgoing traffic from machines “where any<\/i> version of SolarWinds Orion software has been installed,” conduct forensic analysis of new user or service accounts, and to analyze network logs to look for suspicious behavior.<\/p>\n

CISA also warned that even if servers look clear, administrators should “treat all hosts monitored by the SolarWinds Orion monitoring software as compromised by threat actors and assume that further persistence mechanisms have been deployed.” \u00ae<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

And what’s the impact of months-long compromise? UK.gov won’t say \u2013 as CISA orders shutdown of machines Concern is gathering over the effects of the backdoor inserted into SolarWinds’ network monitoring software on Britain’s public sector \u2013 as tight-lipped government departments refuse to say whether UK institutions were accessed by Russian spies.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":38916,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-38915","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nBackdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-14T18:40:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"648\" \/>\n\t<meta property=\"og:image:height\" content=\"331\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector\",\"datePublished\":\"2020-12-14T18:40:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/\"},\"wordCount\":848,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/\",\"name\":\"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg\",\"datePublished\":\"2020-12-14T18:40:06+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg\",\"width\":648,\"height\":331},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/","og_locale":"en_US","og_type":"article","og_title":"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-12-14T18:40:06+00:00","og_image":[{"width":648,"height":331,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector","datePublished":"2020-12-14T18:40:06+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/"},"wordCount":848,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/","url":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/","name":"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg","datePublished":"2020-12-14T18:40:06+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector.jpg","width":648,"height":331},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/backdoored-solarwinds-software-linked-to-us-govt-hacks-in-wide-use-throughout-the-british-public-sector\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Backdoored SolarWinds software, linked to US govt hacks, in wide use throughout the British public sector"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=38915"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38915\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/38916"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=38915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=38915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=38915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}