On 14 December 2020, SolarWinds released a security advisory detailing active exploitation of the SolarWinds Orion Platform versions 2019.4 to 2020.2.1, released between March 2020 and June 2020. SolarWinds Orion is a network monitoring platform commonly used in corporate environments.
The National Cyber Security Centre (NCSC) recommends organisations using the SolarWinds Orion Platform review the links below for mitigation advice:
If you believe your organisation may have been affected by the activity, contact the NCSC Incident Coordination & Response team at incidents@ncsc.govt.nz.