Logo

American Security Council Foundation

Back to main site

Alan W. Dowd is a Senior Fellow with the American Security Council Foundation, where he writes on the full range of topics relating to national defense, foreign policy and international security. Dowd’s commentaries and essays have appeared in Policy Review, Parameters, Military Officer, The American Legion Magazine, The Journal of Diplomacy and International Relations, The Claremont Review of Books, World Politics Review, The Wall Street Journal Europe, The Jerusalem Post, The Financial Times Deutschland, The Washington Times, The Baltimore Sun, The Washington Examiner, The Detroit News, The Sacramento Bee, The Vancouver Sun, The National Post, The Landing Zone, Current, The World & I, The American Enterprise, Fraser Forum, American Outlook, The American and the online editions of Weekly Standard, National Review and American Interest. Beyond his work in opinion journalism, Dowd has served as an adjunct professor and university lecturer; congressional aide; and administrator, researcher and writer at leading think tanks, including the Hudson Institute, Sagamore Institute and Fraser Institute. An award-winning writer, Dowd has been interviewed by Fox News Channel, Cox News Service, The Washington Times, The National Post, the Australian Broadcasting Corporation and numerous radio programs across North America. In addition, his work has been quoted by and/or reprinted in The Guardian, CBS News, BBC News and the Council on Foreign Relations. Dowd holds degrees from Butler University and Indiana University. Follow him at twitter.com/alanwdowd.

ASCF News

Scott Tilley is a Senior Fellow at the American Security Council Foundation, where he writes the “Technical Power” column, focusing on the societal and national security implications of advanced technology in cybersecurity, space, and foreign relations.

He is an emeritus professor at the Florida Institute of Technology. Previously, he was with the University of California, Riverside, Carnegie Mellon University’s Software Engineering Institute, and IBM. His research and teaching were in the areas of computer science, software & systems engineering, educational technology, the design of communication, and business information systems.

He is president and founder of the Center for Technology & Society, president and co-founder of Big Data Florida, past president of INCOSE Space Coast, and a Space Coast Writers’ Guild Fellow.

He has authored over 150 academic papers and has published 28 books (technical and non-technical), most recently Systems Analysis & Design (Cengage, 2020), SPACE (Anthology Alliance, 2019), and Technical Justice (CTS Press, 2019). He wrote the “Technology Today” column for FLORIDA TODAY from 2010 to 2018.

He is a popular public speaker, having delivered numerous keynote presentations and “Tech Talks” for a general audience. Recent examples include the role of big data in the space program, a four-part series on machine learning, and a four-part series on fake news.

He holds a Ph.D. in computer science from the University of Victoria (1995).

Contact him at stilley@cts.today.

Suspected Chinese Hackers Exploit a Different SolarWinds Hack To Compromise USDA’s National Finance Center

Friday, February 12, 2021

Categories: ASCF News Cyber Security

Comments: 0

Suspected Chinese hackers compromised the U.S. government systems through a second SolarWinds hack, according to Reuters. Quoting sources who spoke the condition of anonymity, Reuters reports that the hackers breached a federal payroll agency exposing thousands of federal employees’ records.

Reuters’ contacts also confirmed that the hackers utilized computer infrastructure and hacking tools associated with Chinese state-sponsored hackers. The link between SolarWinds customers and suspected Chinese hackers was just recently discovered, adding to the expanding attack surface exploited by various SolarWinds hacking groups.

U.S. Department of Agriculture confirms the breach but retracts the statement

Investigators speaking anonymously to Reuters said that Chinese hackers exploited a disparate SolarWinds hack from the one exploited by Russian hackers to compromise the National Finance center under the U.S. Department of Agriculture (USDA). USDA spokesman also confirmed that the agency notified individuals and organizations potentially affected by the breach.

However, another spokesman retracted the statement denying the knowledge of any data breach associated with SolarWinds Orion software. He stated that the agency had removed Orion software following a directive by the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (DHS-CISA).

Chinese hackers exploited the SolarWinds hack after establishing persistence

Contrarily, the Austin, Texas-based tech firm said the suspected Chinese hacking incident affected only a single customer and that a security update was released in December 2020.

Additionally, SolarWinds clarified that the suspected Chinese hackers did not gain access to its internal systems at any moment during the incident. The tech firm also denied that the suspected Chinese hackers exploited the SolarWinds hack to breach the affected customer.

The Chinese hackers only exploited the vulnerability after breaking into the network through other means, according to SolarWinds.

“This is separate from the broad and sophisticated attack that targeted multiple software companies as vectors,” the company said in a statement.

Lawmakers demand answers and an overhaul of the national cybersecurity strategy

The Chinese foreign ministry denied any involvement in the breach claiming that identifying the threat actor behind the SolarWinds hack was a complex technical issue. The Chinese government spokesman added that Beijing opposed any form of cyber espionage and any hacking allegations must be supported with evidence.

Sen. Richard Blumenthal (D-Conn.) described the incident as an “unparalleled attack” and a “national security catastrophe” that would haunt the country for decades. He also called for a total overhaul of the national cybersecurity strategy, and a “revamp of federal government cyber defenses.”

Republican members of the House Homeland Security Committee requested a briefing from President Biden’s national security adviser Jake Sullivan regarding the rising Chinese hackers’ cyber espionage activities. They noted the Chinese Communist Party’s “blatant efforts to weaponize their private sector for intelligence and military purposes.”

Chinese hacking incident could expose federal intelligence agents

According to the parties privy to the matter, the Chinese group exploited a disparate vulnerability in Orion’s code to spread across networks once they had a foothold. Experts also confirmed that the SolarWinds hack exploited by the second group was different from the primary attack method used in previous attacks associated with Russian hackers.

Hacking the NFC could reveal the identities of various federal intelligence agents. This is because the agency handles the payroll of over 160 agencies, including the FBI and the Department of Homeland Security. The total number of employees affected could exceed 600,000.

The information potentially leaked includes email addresses, phone numbers, social security numbers, and bank accounts. The suspected Chinese hackers could execute phishing attacks targeting the affected U.S intelligence agents to gather more information about the U.S. intelligence activities.

Additionally, the personally identifiable information could allow U.S. adversaries to disrupt intelligence gathering missions by targeting individual agents.

“This attack seems to be an example of more traditional vulnerability exploitation,” says Tim Erlin, VP, product management and strategy at Tripwire. “The attackers discovered a vulnerability in the software an organization was running and exploited it. Their attack didn’t involve compromising the supply chain.”

Rosa Smothers, a former CIA cyber threat analyst, and technical intelligence officer, now an SVP at KnowBe4, says:

“It’s not surprising to see China – or any adversary with strong forensic and coding capabilities – working to discover and exploit flaws in any software that touches sensitive information such as payroll. SolarWinds released a patch in December to repair this vulnerability, which reinforces what we’ve said all along: patch your systems early and often.”

Photo and link: Suspected Chinese Hackers Exploit a Different SolarWinds Hack To Compromise USDA’s National Finance Center - CPO Magazine

Comments RSS feed for comments on this page

There are no comments yet. Be the first to add a comment by using the form below.