“While we have identified limited instances of the vulnerable SolarWinds Orion software in our own internal environment, our own internal investigation has not revealed any indication of exploitation,” VMware

As many as 18,000 SolarWinds customers installed the company’s Orion software updates containing malicious code likely inserted by Russian nation-state hackers, according to SEC documents.

SolarWinds was centerstage of the FireEye, US government cyberattack; T-Mobile has gained Kubernetes confidence; and Rakuten defended open RAN.

Less than 10% of security professionals say that their security posture is fully prepared for 5G rollouts, according to an AT&T Cybersecurity report.

Multiple news outlets blamed Russia government hackers, nicknamed APT29 or Cozy Bear, for the breach and said they also hit several U.S. government agencies.

The update also signals the beginning of the end of support for the Dockershim container runtime interface for Docker, which drew considerable attention to mitigate.

As a sign of success against the larger security vendor, Orca CEO Avi Shua pointed to Palo Alto Networks using legal threats and demanding Orca take down a product

The cloud provider committed to implementing resource public key infrastructure (RPKI) origin validation and route object validation.

“I’ve concluded we are witnessing an attack by a nation with top-tier offensive capabilities,” FireEye CEO Kevin Mandia said.

In its advisory, the U.S. National Security Agency urged organizations to patch affected systems “as soon as possible.”

“Cybercrime is a business, and it’s a good business,” McAfee CTO Steve Grobman said.

IBM slashed 10,000 jobs, 20% of its European workforce; plus the latest headcount hirings, promotions, and staff changes from November.

“So much of venture is really about forming relationships between investors and entrepreneurs, and it’s very, very difficult to build those relationships virtually,” Allegis Capital’s Bob Ackerman said.

Some 44% of organizations experienced at least one hardware-level or firmware attack over the past 12 months, and 16% have had more than one attack.

“Nine months ago people knew zero trust as a paradigm was coming, and then it basically arrived overnight in a violent and unceremonious fashion,” Cisco CISO Mike Hanley said.

The move sees AWS link its Nitro System with Apple’s Mac Mini computer to allow Elastic Compute Cloud Instances to be built, run, and tested on Apple’s macOS.

“Attackers are reaching into backup environments and encrypting that data to the point where backups are no longer a sufficient solution,” Green Cloud CEO Keith Coker said.

Respond developed a cloud-native extended detection and response engine that uses artificial intelligence to automate security alert investigation.

Kubernetes complexity continued to challenge lock-In concerns; AWS added a network firewall; and T-Mobile's Ray knocked mmWave, open RAN.

It uses multiple machine learning models to analyze security signals for each web service to detect potential attacks against web apps and services.

The vendors continued to dominate the LAN switching and wireless access markets while Arista carved out a niche following the acquisition of Mojo Networks.

Remote work, coupled with the fact only 21% of small to midsized businesses implemented new technology to deal with security issues, highlights the risks for SMBs.

Extreme bet bit on cloud to unseat Cisco; IBM unveiled a 5G telco cloud; and Intel’s AI buying spree continued.

IBM outranked several tier-one operators’ managed security arms including AT&T Cybersecurity, CenturyLink, NTT, and Telefónica’s ElevenPaths.