An advanced persistent threat group gained long-term access to an unnamed entity’s network through its Pulse Secure VPN and SolarWinds’ Orion server. U.S. Cybersecurity and Infrastructure Security Agency says the attack is unrelated to an attack on SolarWind’s supply chain. CISA declined to attribute the attack to the threat group Bronze Spiral, also known as Tick, which is associated with China. The Bronze Spiral APT group was involved in the attack described by CISA, Secureworks says.”]
Source: https://www.govinfosecurity.com/supernova-attack-leveraged-solarwinds-pulse-secure-a-16454