id author title date pages extension mime words sentences flesch summary cache txt arstechnica-com-2420 ~18,000 organizations downloaded backdoor planted by Cozy Bear hackers | Ars Technica .html text/html 1950 140 56 Security firm FireEye, which last week disclosed a serious breach of its own network, said that hackers backed by a nation-state compromised a SolarWinds software update mechanism and then used it to infect selected customers who installed a backdoored version of the company's Orion network management tool. The hacks are part of what the federal government and officials from FireEye, Microsoft, and other private companies said was a widespread espionage campaign that a sophisticated threat actor was carrying out through a supply chain attack. In blog post FireEye published Sunday night, the company said it uncovered a global intrusion campaign that used the backdoored SolarWinds' update mechanism as an initial entryway "into the networks of public and private organizations through the software supply chain." Publications—including The Washington Post and The New York Times—cited unnamed government officials saying Cozy Bear, a hacking group believed to be part of the Russian Federal Security Service (FSB) was behind the compromises. ./cache/arstechnica-com-2420.html ./txt/arstechnica-com-2420.txt