SolarWinds hack

SolarWinds hack: CISOs need to revisit cyber resilience?

by | Dec 23, 2020 | IT Security

The SolarWinds hack has highlighted the threats caused by third-party vendors and challenges the cyber resilience position of enterprises.
Share to lead the transformation

What many organizations feared came true! The year 2020 brought another shock to the business community last week with discovering a new cyber-attack, SolarWinds hack’ in the United States. The attack is an opportunity for enterprises and CISOs to reflect on their cyber resilience strategies. (See: Top enterprise cybersecurity trends of 2020)

For the unversed, California-based cybersecurity company FireEye uncovered the SolarWinds hack last week and estimated that the cyberattack campaign might have started as early as Spring 2020 and remained undetected for months.

The cyberattack emerged as one of the largest ever targeted against the U.S. Government and several other global companies, threatening organizations’ cyber resilience levels. To date, dozens of emails from the U.S. Treasury Department have been confirmed as compromised.

The attack was hurled by cybercriminals who hacked the infrastructure of an American I.T. Software company, SolarWinds, and then used illegitimate access to insert malicious code in the software updates that the company sends out to its 30,000 plus clients that also includes several departments of the U.S. Government. SolarWinds stated that the updates issued between March and June 2020 were contaminated.

Several industry onlookers have also slammed SolarWind’s lackluster approach to conquer its shortcomings. For instance, the Chief Information Security Officer’s (CISO) longstanding vacant position from its board and notifications issued to customers around deactivating antivirus tools before installing SolarWinds software.

Far-reaching effects

While the timelines of the SolarWinds hack are still unfolding, the SolarWinds breach is disturbing to the whole of the I.T. industry as it can have a far-reaching effect on many big organizations’ networks, questioning their cyber resilience levels.

The SolarWinds breach reflects that most organizations are appallingly unqualified to detect and prevent such kinds of software supply chain attacks. SolarWinds boast that it has been working with 425 of the U.S. Fortune 500 companies and hundreds of universities and colleges globally. This means that the severity of the attack can be severe in the coming days.

Top tech companies, Intel, Microsoft, Cisco, and NVIDIA, have all confirmed their exposure to the malicious software and undertaking necessary investigations to gauge the impact.

In a column published in the New York Times, Thomas P. Bossert, a former domestic security adviser to President Trump, notes that supply chain attacks of such magnitude require significant resources and sometimes years of execution.

Bossart also opined that a foreign state might have launched SolarWinds hack in a well-orchestrated way. These evaluations, if proved correct, can be more hazardous. For instance, in war-like situations, confidential data of governments can be modified or erased by hackers instantly to cause financial loss or take undue strategic advantage.

Stresses lack of preparation of organizations

As we move into 2021, the Solar Winds hack event has once again reiterated nothing is completely secure in this ever-evolving threat landscape. Indeed, no vendor or solution can fully guarantee to protect the networks of an enterprise. Perfect information security is a myth, but the key is resilience. (See: How COVID-19 has changed cybersecurity focus for 2021)

The last few weeks must have been more strenuous for CIOs and CISOs who would need to spend long-hours evaluating the impact on their networks, systems, and data from the SolarWinds cyber-attack. It’s time for enterprises to seek responses to some of the key questions more vehemently:

  • Do you have a contingency plan to combat accidental breaches and unknown threats?
  • Do you depend upon a single security vendor (say, for VPN, network monitoring, and network slicing) or want to onboard different security vendors to safeguard our networks?
  • Can you change our defense approach to strengthen our cyber resilience levels?
  • Are you regularly testing our multiple endpoints and operating systems and keeping them secure?
  • Have you evaluated the risks of third-party software vendors and analyzed their ability to combat sophisticated threats?
  • Is your service-level-agreement updated?

The SolarWinds hack event could be a catalyst for technology leaders to rethink and analyze all their security solutions and potential gates of network vulnerabilities in the context of modern-day technologies. There might be many undisclosed portions, and more details around the impairment from the breach is likely to continue to come out in the next few weeks.

 

 

 

MORE FROM BETTER WORLD

Atal Community Innovation Centre launched

Atal Community Innovation Centre launched

Minister of Petroleum and Natural Gas & Steel Dharmendra Pradhan launched Atal Community Innovation Centre (ACIC) in New Delhi, to encourage the spirit of innovation at the community level. This initiative aims to encourage the spirit of innovation through solution-driven design thinking to serve society, a PIB release said.

Speaking on the occasion, Pradhan said, Atal Innovation Mission has a key role to perform in order to achieve the target of five trillion dollar economy by 2025. He urged the NITI Aayog to open innovation Centres in all Gram Panchayats of the country to promote local innovation. Pradhan said innovation is part of every Indian’s daily affairs and there is need to support and promote them.He said that traditional and conventional knowledge available in the country needs to be supported and brought into the mainstream, through innovative mechanism.

Dharmendra Pradhan

The minister urged for innovative mechanism to harness and support traditional knowledge in the country.

Lauding the efforts of NITI Aayog in coming up with the idea of ACICs, the Minister said that they will make available cutting-edge innovation platforms across all corners of our country, with a focus on Aspirational Districts, Tier 2 and 3 cities and to North-east and J&K which will give a fillip to the skill development and employment opportunities in these areas. ACIC’s grassroot-level approach shall focus on a community oriented problem solving through small ideas with a big impact. ACICs will become a conduit for CSR funding by private and public sector firms in addition to direct funding through Atal Innovation Mission (AIM).

Pradhan said reducing the lab to land distance is one of the key objectives of AIM and Atal Community Innovation Centre will help in further strengthening our mission to strengthen the entrepreneurial ecosystem of India. ACICs will add a new chapter to India’s innovation story. It is a platform where the most innovative minds of the country can get access to solutions to modern entrepreneurial challenges.

The Minister also said that India produces approx. 600 MMT of non-fossilised biomass through farm waste, which if converted to energy can help usher prosperity in rural economy, promote a sustainable energy future & make our Annadatas, our ‘Urjadata’, in line with Hon. PM’s vision of Waste to Wealth creation. This is a CSR initiative in true sense.He expressed full support for the culture of innovation in the Country and assured that the public sector undertakings from Steel and Petroleum Sectors will provide support and hand-holding in this innovation mission. “I have asked Public Sector Undertakings (PSUs) to support this initiative, I also request NITI Aayog & AIM to innovate ACICs to help in finding innovative solutions to extract consumable energy from Biomass available in the country”, Pradhan said. The Minister added that Unique and incentivized solutions offered by ACICs will encourage students, researchers and other individuals/group of individuals to ideate and design novel solutions. ACICs will also connect innovative thinkers to our market and mainstream economy.

ACIC is a new initiative of Atal Innovation Mission to support community innovation drive in the country. The program is directed to encourage the spirit of innovation through solution driven design thinking to serve the society. It will focus on underserved and unserved regions of the country which at present lack a vibrant start-up and innovation ecosystem. ACIC will be established either in PPP mode or with support of PSUs and other agencies. The maximum grant-in-aid support form AIM will be up to 2.5 crores subject following compliance to ACIC guidelines and contributing matching form the host institutions and their funding partners.

Following are the distinguishing features of the program:

  • Enabling infrastructure for building innovation ecosystem in above proposed areas.
  • Community oriented approach to innovation by enabling solutions through advanced tinkering
  • Offer opportunities to innovators to ideate in areas of societal importance
  • Capacity building of communities in evolving technologies and taking their solutions from ideation to prototype.
  • Promoting design thinking process to spur innovation
  • Providing a framework to engage local industries to facilitate offering of innovative solutions in their products, services and processes
  • Public private Partnership (PPP) mode to ensure financial sustainability and participationof central agencies, PSUs etc. to mobilize resources for running the program
  • Offer an opportunity for everyone to innovate, ideate and design impactful solutions, irrespective of their age.
  • One of the unique feature of this program wherein talented students and youth of ITI and Diploma will be offered opportunity to display their and build innovative solutions through ACIC.
  • The program will offer a big leapfrog jump towards establishing Indian for further scale up the ranking in Global Innovation Index.

The Vice-Chairman of the NITI Aayog Rajiv Kumar and CEO of the Aayog Amitabh Kant also spoke on the occasion.

A new logo, posters, brochure and video, AICC website, and application portal were also launched on the occasion.

Innovate to turn biomass into energy: Pradhan

Innovate to turn biomass into energy: Pradhan

Dharmendra Pradhan

The minister says 600 MMT of non-fossilized biomass could be converted to energy.

Minister of Petroleum and Natural Gas & Steel Dharmendra Pradhan has said that India produces approximately 600 MMT of non-fossilized biomass through farm waste, as per a Press Information Bureau release. This, if converted to energy, can help usher prosperity in rural economy, promote a sustainable energy and make our Annadatas (foodgrains providers), our Urjadatas (energy providers), in line with PM’s vision of Waste to Wealth creation.

Pradhan was speaking at the launch of Atal Community Innovation Centre (ACIC) in New Delhi, which has been set up to encourage the spirit of innovation at the community level across the country.

Noting that this was a CSR initiative in true sense, Pradhan expressed full support for the culture of innovation in the country and assured that the public sector undertakings from steel and petroleum sectors will provide support and hand-holding in this innovation mission. “I have asked Public Sector Undertakings (PSUs) to support this initiative, I also request NITI Aayog & AIM to innovate ACICs to help in finding innovative solutions to extract consumable energy from Biomass available in the country”, the minister said. He added that unique and incentivized solutions offered by ACICs will encourage students, researchers and other individuals/group of individuals to ideate and design novel solutions. ACICs will also connect innovative thinkers to our market and mainstream economy.

India holds energy talks with Niger, Togo, and Tonga

India holds energy talks with Niger, Togo, and Tonga

Amina Moumouni, the Minister of Energy, Niger.

Marc Dederiwe Ably- Bidamon, Minister of Energy and Mines, Togo.

Union Minister of State for Power and New & Renewable Energy (IC) and Skill Development & Entrepreneurship RK Singh held bilateral meetings with Energy Ministers of Niger, Togo, and Tonga on 30 July. The bilateral talks were held with Amina Moumouni, the Minister of Energy, Niger; Marc Dederiwe Ably- Bidamon, Minister of Energy and Mines, Togo and Poasi Mataele Tei, Minister of Energy, Tonga in New Delhi, a PIB release said.

Poasi Mataele Tei, Minister of Energy, Tonga.

The meetings were held on the sidelines of first International Solar Alliance (ISA) Standing Committee Meeting in New Delhi. During the meetings, the Minister discussed various issues pertaining to ISA and areas of bilateral cooperation between India and these countries in Energy sector.

The ISA is an alliance of more than 122 countries headquartered in India. As the largest grouping of countries after the United Nations, ISA’s objective is to leverage solar energy in an efficient manner in order to reduce dependence on fossil fuels. As per the International Solar Alliance (ISA), it is conceived as a coalition of solar resource rich countries to address their special energy needs and provide a platform to collaborate on addressing the identified gaps through a common, agreed approach. The initiative was first proposed by India’s Prime Minister Narendra Modi in 2015.

 

Govt mulls waterways for the Northeast region

Govt mulls waterways for the Northeast region

(Representative image)

The Ministry of Shipping is keen to start inland waterways navigation and passenger transportation in the rivers in the North Eastern states of the country. Mansukh Mandaviya, Minister of State (Independent Charge) of Shipping and MoS, C&F has said that the public sector company Water and Power Consultancy Services Limited (WAPCOS) is preparing a model detailed project report (DPR) for implementing projects for running low-cost ferry services in the inland waterways in these states. This model DPR can be adopted for quick implementation by the Inland Waterways Authority of India in consultation with the different state governments in the region.

As per a PIB release, Mandaviya also said that inland waterways transport can be a game changer for the North Eastern states as land routes here are often long, circuitous and time consuming due to the difficult terrain. Besides bringing ease of movement, the waterways projects will also help generate employment locally, he said.

It is noteworthy that after the passing of the 2016 National Waterways Act, India has made significant progress in developing new waterways. When it comes to the Northeast, waterway navigation could help cut distances as well as the carbon footprint in the region by several notches and hence may be seen as a positive for the environment. Given the intent to focus on low-cost ferry services, the impact on river ecology may also be designed to be minimum.

PM lays stress on balancing development and environment as tiger count nears 3,000

PM lays stress on balancing development and environment as tiger count nears 3,000

royal bengal tiger

A Royal Bengal tiger in Kanha National Park, Madhya Pradesh, India. (Source: Wikipedia)

On the occasion of Global Tiger Day today, Prime Minister Narendra Modi released the results of the fourth cycle of All India Tiger Estimation – 2018, at Lok Kalyan Marg in New Delhi. The count of tigers in India, has risen to 2,967, in 2018, according to this survey.

Speaking on the occasion, the Prime Minister described this as a historic achievement for India, and reaffirmed India’s commitment towards protecting the tiger. The Prime Minister appreciated the speed and dedication with which various stakeholders worked to achieve this. He described it as one of the finest examples of Sankalp Se Siddhi. Once the people of India decide to do something, there is no force that can prevent them from getting the desired results, he declared.

The Prime Minister said that with almost 3000 tigers, India is today among the biggest and most secure habitats.

Prime Minister asserted that the way ahead is “collectiveness” instead of “selectiveness.” He said that a broad-based and holistic look is essential for environmental conservation. He said, it is possible to strike a healthy balance between development and environment. “In our policies, in our economics, we have to change the conversation about conservation,” he added.

India will build more homes for our citizens and that the same time create quality habitats for animals. India will have a vibrant marine economy and a healthier marine ecology. This balance is what will contribute to a strong and inclusive India, the Prime Minister asserted.

He expressed confidence that India will prosper both economically and environmentally; India will build more roads and India will have cleaner rivers; India will have better train connectivity and also greater tree coverage.

He said that in the last five years, while work has proceeded at a fast pace for next-generation infrastructure, the forest cover in the country has also grown. There has also been an increase in the “protected areas.” In 2014, there were 692 protected areas, which increased to more than 860 in 2019. The “Community Reserves” have also grown from 43, in 2014, to more than 100 now.

The Union Minister for Environment, Forests and Climate Change, Prakash Javdekar; the Union Minister of State for Environment, Forests and Climate Change, Babul Supriyo; and the Secretary, Ministry of Environment, Forests and Climate Change, C.K. Mishra, were present on the occasion.

News Source: Press Information Bureau 

Pix Source: Wikipedia (see attribution)

Mega capacity building program launched for sustainable rural water supply and sanitation

Mega capacity building program launched for sustainable rural water supply and sanitation

water supply

The program aims to improve rural water supply and sanitation. (Representative image.)

The Union Minister of Jal Shakti, Gajendra Singh Shekhawat, launched the capacity strengthening initiative of the Department of Drinking Water and Sanitation (DDWS), Ministry of Jal Shakti, in Ranchi, Jharkhand on 27 July. He was joined at the event by the Minister of State for the Ministry of Jal Shakti, Rattan Lal Kataria, Chief Minister of Jharkhand, Raghubar Das, and Minister of the Drinking Water and Sanitation,Government of Jharkhand, Ramchandra Sahis. This initiative will create a pool of 2,800 field trainers in its initial trainings, who will reach out to around 2.5 lakh Gram Panchayats across the country.

The initiative seeks to ensure the sustainability of open defecation free (ODF) villages created under the Swachh Bharat Mission in the long term and enable field trainers and members of Panchayat Raj Institutions (PRIs)  to create capacity to manage solid and liquid wastes as well as improve access to safe and adequate drinking water supply.

Addressing more than 6,000 Mukhiyas (i.e., panchayat heads), Jal Sahiyas, Swachhagrahis and others present on the occasion, Shekhawat emphasized the need for people’s participation highlighting that it is now time to turn the “jal ka andolan” into “jan ka andolan”to avert the impending water crisis. He appreciated the role of people who has committed themselves towards the cause of the Swachh Bharat Mission. Because of their efforts, in ODF and sanitized villages lakhs of lives have been saved, he added. He urged the people to re-energize their efforts for enabling sustained safe sanitation practices and expanding their efforts towards the provision of piped water supply to every household.

The Minister of State, Ministry of Jal Shakti, Rattan Lal Kataria also appreciated the role played by the various stakeholders in making Jharkhand State ODF and reiterated that the country is on track to achieve an ODF India by 2nd October 2019, on the 150th birth anniversary of Mahatma Gandhi.

Addressing the gathering, Secretary, DDWS, Parameswaran Iyer shared the details of the capacity building training program. He shared that by January 2020, four Field Trainers (FTs) from each district will be trained through five-day Training of Trainers (ToTs) organized by the DDWS. The FTs would then train Sarpanchs, village secretaries and Swachhagrahis in their districts through a 3-day field training supported by the states and the districts, completing the entire exercise by March 2020.

During the event, a booklet and a film on the Jharkhand State Government’s Menstrual Hygiene Management Campaign – ‘Chuppi Todo-Swasth Raho’ Abhiyan were released while grassroots functionaries shared their experiences of being a part of the Swachh Bharat Mission (Grameen). This was followed by an award ceremony recognizing the outstanding contributions in the field of sanitation.

0 Comments