>> WELCOME BACK THE TEARS NEWS
WRAP, THE INFAMOUS SOLAR WINDS
HACK WILL TAKE CENTER STAGE ON
CAPITOL HILL TOMORROW WITH
LAWMAKERS SET TO HEAR TESTIMONY
FROM THE HEADS OF SOLAR WINDS,
MICROSOFT AS WELL
AS CROWDS. TUESDAY'S HEARING
COMES AFTER IT WAS REVEALED
BACK IN DECEMBER THAT FOREIGN
HACKERS HAD BEEN US FINE ON
MAJOR US
AGENCIES, INCLUDING THE
DEPARTMENT OF HOMELAND SECURITY
PARTS OF THE PENTAGON, THE
STATE AND AND
MANY MORE. I SAT DOWN WITH
VIRGINIA SENATOR MARK WARNER
WHO'S THE CHAIRMAN OF THE U.S.
SENATE SELECT COMMITTEE ON
INTELLIGENCE FOR HIS TAKE TAKE
A LOOK.
>> WE'RE GOING TO HAVE THE CEO
OF SOLARWINDS WHENEVER. THE
PRESIDENT OF MICROSOFT GOING
TO.
CYBERSECURITY FIRMS AND AND
FIRE I AND CROWDSTRIKE AND I
ONE
I THINK WE WE NEED TO MAKE THE
POINT THAT EVEN THOUGH THIS WAS
A SOPHISTICATED OR
AN ADVERSARY. AND THEY WERE
QUITE GOOD THAT DOES NOT
BELIEVE THESE COMPANIES FROM
PRACTICING GOOD CYBER HYGIENE.
THE FACT THAT THIS WAS SUCH AN
EXTENSIVE HACKED LITERALLY WENT
TO
18,000. SO WHEN CUSTOM MARSH
LUCKILY, THE DID
NOT USE THE TOOLS THEY HAD IN
THE MOST DESTRUCTIVE WAY THEY
NARROW THAT UNIVERSE OF FIRMS
THAT PAY EXTRA FOR THAT
INFORMATION. TO A MUCH
LOWER NUMBER. BUT IT POINTED
OUT THAT IN
OUR CURRENT LAWS IN REGIME, WE
HAVE NO MANDATORY REPORTING A
CAR.
AND BUT FOR THE FACT THAT ONE
OF THESE COMPANIES COMING
FORWARD AND AND SAYING HEY THEY
GOT HACKED WE MIGHT NOT STILL
HAVE BEEN FULLY AWARE OF THIS
AND THIS ATTACK BEING SO
EXPENSIVE SO WE NEED TO THINK
ABOUT HOW DO WE DO A BETTER JOB
OF PREVENTION. HOW WE MAKE SURE
WE
GOT HIM 41 REQUIREMENT WE MAKE
SURE WE'VE GOT THE WHITE PEOPLE
THAT
ARE REPORTED 2 AND WHEN THE BAD
GUYS AND THE BAD GUYS CAN
SOMETIMES AS THEY DID IN THIS
CASE WATCH THEIR ATTACK FROM A
DOMESTIC SERVER. RAISES A WHOLE
SERIES OF NEW QUESTIONS THAT
WE'VE NOT HAD TO CONFRONT.
>> SO YOU
SAY THERE THAT THE BAD GUYS AND
I DO WANT TO QUICKLY MENTION
THAT THAT NATIONAL SECURITY
ADVISER, JAKE SULLIVAN
YESTERDAY INDICATED THAT IT WAS
RUSSIA BUT THE BY THE WHITE
HOUSE REALLY HAS NOT FIRMLY
SAID SO WE HAVE THAT BECAUSE OF
INTELLIGENCE MEDIAN AND PEOPLE
LIKE MIKE POMPEO BUT THAT GOES
BACK TO THE
FORMER ADMINISTRATION ARE YOU
CONFIDENT THAT SOME
KREMLIN-BACKED ENTITY
EXPLICITLY IS RESPONSIBLE.
>> I'M VERY CONFIDENT THAT THIS
WAS A FOREIGN ADVERSARY THAT
RUSSIA
WAS INVOLVED AND AGAIN I THINK
THE ADMINISTRATION WILL MAKE A
MORE FORMAL AFTER BUSH AND
STATEMENT AT SOME POINT AND I
THINK WE WILL WE NEED TO MAKE
THAT ATTRIBUTION AND THEN
WE NEED WITH US AND OUR ALLIES
BECAUSE THIS IS NOT
JUST THAT AND THOSE SOLAR WINDS
AND NOT JUST HAPPENED IN THE
UNITED STATES. WE NEED TO HAVE
SOME COMMON STANDARDS WHERE WE
WANT OUR ADVERSARIES. I THINK
YOU DID TAKE THIS KIND OF
ACTION THERE'S GOING TO BE
IT'S GOING TO BE CONSEQUENCES
FOR A LONG TIME IN AMERICA
BECAUSE WE ARE SO I T DEPEND
BECAUSE WE ARE.
SO TECHNOLOGY-DRIVEN WE WILL
LOCK THEM TO HOLD THE BAD GUYS
ACCOUNT AND WE SAW THAT WHEN
THE CHINESE ATTACKED THE OPM.
FILES OF ALL GOVERNMENT
EMPLOYEES WHEN THEY ATTACKED
EQUIFAX 150 MILLION AMERICANS
AND THE PERSON INFORMATION
ACTUAL TRADED. WE WERE
RELUCTANT TO PACK.
HUNCHBACK BECAUSE WE'RE AFRAID
OF
CYBER ESCALATION. WE CAN'T BE
TIMID IN THIS SPACE GOING
FORWARD THIS IS ASYMMETRICAL
WARFARE AND CONFLICT LET'S
FACE IT THAT IN MANY AREAS THAT
THE BAD GUYS ARE HERE OR CLOSE
TORE UP HERE.
>> I HAVE A QUESTION ABOUT THE
WITNESS
SO DAKAR RAMAKRISHNAN IS THE
CURRENT TO THE
SOLAR WINDS. RAMA CHRISTIAN IS
THE GENTLEMAN YOU WILL BE
SPEAKING WITH TOMORROW BUT HE
WAS NOT CEO OF SOLAR WINDS
DURING THE ENTIRETY OF
THE TIME WHEN THE COMPANY WAS
UNDER ATTACK THAT WAS FORMER
CEO KEVIN THOMSON WISE THE
COMMITTEE NOT SPEAKING WITH THE
CEO WHO'S THERE AT THE TIME.
>> WE FELT HAVING BOTH THE CAR.
CURRAN CEO WHO'S DEALING WITH
THE REMEDIATION AND CROWDSTRIKE
WHO'S BEEN BROUGHT IN
BY M SO THE WINDS TO HELP FIX
THE PROBLEM, YOU KNOW I THINK
THERE WILL. THERE WERE CERTAIN
THINGS I THINK OBVIOUSLY SO THE
WINDS COULD HAVE DONE BETTER.
WHEN WE'RE DEALING WITH A FIRST
HERE AT THIS EVERY BRINGING
THEIR A
PRIVATE SECTOR COMPANIES ON CAN
BUT THAT DOES NOT MEAN SOMEONE
GOING TO LET THESE PRIVATE
SECTOR COMPANIES OFF THE HOOK
FOR HAVING RESPONSIBLE CYBER
IGN BEHAVIOR BECAUSE EVEN IF
THE BAD GUYS GET IN IF YOU'VE
GOT GOOD CYBER HYGIENE YOU CAN
SPOT THEM EARLIER. SO WE FIGHT
THE CURRENT CEO.
GOING FORWARD BASIS AND I I'VE
HAD SOME CONVERSATION WITH THEM
ALREADY I THINK YOU REALIZE HOW
SERIOUS THIS IS AND HOW THEY
HAVE TO HIM CHANGE THE
PERFORMANCE.
>> WHAT DOES THAT TELL YOU THAT
RAMAKRISHNAN WAS ANNOUNCED AS
THE NEW CEO ON DECEMBER 9 4
FULL
DAYS BEFORE THE DISCLOSURE OF
THE ATTACK ITSELF OR DOES THAT
TELL YOU ABOUT THE CALCULUS AND
THE BEHIND CLOSED DOOR THINKING
OF SOLAR WINDS. THE COMPANY.
>> THE ACTUAL ANNOUNCEMENT OF
THE HACK IT TAKING PLACE PRIOR
TO THAT.
THIS IS AN
AREA WHERE THEIR COMPANIES
WHILE MOST COMPANIES ARE
RELUCTANT TO
FULLY REPORT BECAUSE THEY'RE
AFRAID OF THEIR LIABILITY
ISSUES AND WE DON'T HAVE
MANDATORY REPORTING.
THAT'S A LITTLE BIT CRAZY BUT
WE SEE A COMPANY HAS PENETRATED
THAT LITERALLY TOUCH, 18,000
ADDITIONAL FIRMS. SO I THINK WE
NEED TO LOOK AT MANDATORY
REPORTING. I THINK WE OUGHT TO
TALK TO REPORT
AND WHETHER THERE ARE SOME
PROTECTIONS GIVEN TO COMPANIES
THAT FINALLY REPORT AS WE NEED
THIS KIND OF TIMELY.
SWAT TEAM TYPE
EFFORT TO. ELSE MAY BE
VULNERABLE REAL TIME WE DON'T
HAVE THAT KEEP THE NAME OF THAT
FROM THE GOVERNOR AND WE'VE GOT
9 AGENCIES THAT HAVE BUT THEIR
ONGOING REMEDIATION IS ALL DONE
ON A ONE-OFF BASIS AGAIN THAT'S
A LITTLE BIT CRAZY WHEN WE ARE.
IN THIS CASE ONLY THINKING
ABOUT THANK GOODNESS A FOREIGN
ADVERSARY THAT CAME IN AND TOOK
OUT SPECIFIC INFORMATION ACTUAL
TRADED
CERTAIN INFORMATION. THEY WERE
IN THEY BAKE COULD HAVE USED
THIS TOOL TO BE MUCH MORE
CONSTRUCT THE MOVE IT INTO
ALMOST A DENIAL OF SERVICE
TYPE.
FURTHER AWAY FROM ESPIONAGE
A LOT CLOSER TO ACTUAL
NATION-STATE CONFLICT AND WE
NEED TO REALIZE THERE WAS THAT
MOMENT, WHAT.
>> I'M RUNNING OUT OF TIME,
ANOTHER HIGH-PROFILE NAME, BRAD
SMITH CEO MICROSOFT WILL
BE THERE. PEOPLE ARE LOOKING AT
THIS AND WONDERING WHAT YOU
MOST WANT TO LEARN FROM MISTER
SMITH.
>> I WANT TO HEAR MICROSOFT DID
COME FORWARD, BUT I WANT TO
KNOW.
WHETHER THE VULNERABILITIES THE
GOT INTO THEIR CLOUD SYSTEM AND
MICROSOFT DOES THAT MEAN OTHER
CLOUD SYSTEMS MAY BE VULNERABLE
AS WELL AND I HOPE WE'LL GET
SOME OF THOSE ANSWERS TOMORROW.