Anatomy of the SolarWinds Hack: Who What Where When How
a16z Podcast1 Feb 2021

Anatomy of the SolarWinds Hack: Who What Where When How

In this special “3x”-long episode of our (otherwise shortform) news analysis show 16 Minutes -- past such 2-3X explainer episodes have covered section 230, Tiktok, GPT-3, the opioid crisis, more -- we cover the SolarWinds hack, one of the largest (if not the largest!) publicly known hacks of all time... and the ripple effects are only now starting to be revealed. Just this week, the U.S. Cybersecurity and Infrastructure Security Agency shared (as reported in the Wall Street Journal) that approximately 30% of both private-sector and government victims linked to the hack had no direct connection to SolarWinds. So who was compromised, do they even know, can they even know?!

Because this hack is a supply-chain compromise involving various third-party software and services all connected together in a "chain of chains", the knock-on effects of it will be revealed (or not!) for years to come. So what do companies -- whether large enterprise, mid-sized startup, or small business -- do? What actually happened, and when does the timeline really begin? While first publicly revealed in December 2020 -- we first covered the news in episode #49 here when it first broke, and there have been countless headlines since (about early known government agency victims, company investigations, other tool investigations, debates over who and how and so on) -- the hack actually began not just a few months but years earlier, involving early tests, legit domains, and a very long game.

We help cut through the headline fatigue of it all, tease apart what's hype/ what's real, and do an "anatomy of a hack" step-by-step teardown -- the who, what, where, when, how; from the chess moves to technical details -- in an in-depth yet accessible way with Sonal Chokshi in conversation with a16z expert and former CSO Joel de la Garza and outside expert Steven Adair, founder and president of Volexity. The information security firm (which specializes in incident response, digital forensics/ memory analysis, network monitoring, and more) not only posted guidance for responding to such attacks, but also an analysis based on working three separate incidents involving the SolarWinds hackers. But how did they know it was the same group? And why was it not quite the perfect crime?

image: Heliophysics Systems Observatory spacecraft characterize, in the highest cadence, the constant stream of particles exploding from the sun affect Earth, the planets, and beyond via NASA Goddard Space Flight Center / Flickr

Stay Updated:

Find a16z on X

Find a16z on LinkedIn

Listen to the a16z Podcast on Spotify

Listen to the a16z Podcast on Apple Podcasts

Follow our host: https://twitter.com/eriktorenberg

Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures.


Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Avsnitt(934)

a16z Podcast: Security's Painful Prominence and Why There is No Turning Back -- with Marc Andreessen

a16z Podcast: Security's Painful Prominence and Why There is No Turning Back -- with Marc Andreessen

Cyber attacks are growing in number and impact, and the reason is simple: there's more of value (and more vectors to) steal in our increasingly virtual world. So how are we to continue to move forward along this connected path as a culture and as businesses? Marc Andreessen tackles that question in this segment of the a16z Podcast -- against the backdrop of ever-more sophisticated hackers and hacks, Edward Snowden, and the rise of trillions more devices coming online. Still, despite the real risk and pain of cyber attacks we won't go backwards -- we have no choice but to move forward, says Andreessen. "The reason we don’t have a choice is there’s too much value in the virtual world." Smartphones, the internet; pick your favorite device, app, or service... ask yourself what (if anything) you would be willing to give up. Not much, right? The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information. Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

31 Mars 201534min

a16z Podcast: How to Lead, Not Manage Your Board

a16z Podcast: How to Lead, Not Manage Your Board

As the CEO of a startup your board is a critical tool in helping your company grow; the board is there to make you a better CEO. (Or at least it should be.) But how do you best leverage your board’s expertise -- both during meetings and outside scheduled time -- and what kind of people should fill the precious few slots you have? “Don’t end up with one of those boards with six VCs on it,” says a16z General Partner Scott Weiss. Seems like strange advice coming from a VC, but the point, Weiss says, is to have a balance of people on your board -- especially in the early stages of a company. “For every VC you have, add a CEO -- that’s how you get that outside perspective.” Weiss is joined in this segment of the podcast by former Chairman and CEO of 3Com (and a16z Board Partner) Bill Krause; Box co-founder and CEO Aaron Levie; Zillow CEO Spencer Rascoff; and former CEO and Chairman of NetApp Dan Warmenhoven to discuss the practicalities of building and leading boards over the lifetime of a company -- from early days to prepping for an IPO. Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

26 Mars 201548min

a16z Podcast: Public or Private? Finding the Right Board Seat

a16z Podcast: Public or Private? Finding the Right Board Seat

Getting a board seat isn't just about adding value, but also about what value you take from it for your career. But why do it? When? How? And should you focus on a public or private company? To answer these questions and share their perspectives, this segment of the a16z Podcast features three current board directors and veteran executives: Amy Bohutinsky, CMO of the Zillow Group and a board director at Hotel Tonight and Avvo; Dawn Lepore, former Chair and CEO of Drugstore.com and a board director at AOL, Real Networks, and Coupons.com; and Michelle Wilson, former Amazon general counsel and a board member at Zendesk. Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

25 Mars 201529min

a16z Podcast: The Truth about Serving on Boards (with Diane Greene and Marc Andreessen)

a16z Podcast: The Truth about Serving on Boards (with Diane Greene and Marc Andreessen)

Diane Greene -- who is on the boards of Google and Intuit -- has some golden rules when it comes to serving on boards. No 1: “You don’t want to tell them how to do strategy, whether it’s a big company or a small company,” she says. “That’s not your job. Your job as a director is to ask questions.” Lots of questions. In this segment of the a16z Podcast, a16z's Marc Andreessen and VMware co-founder and former CEO Diane Greene have a candid conversation about their experiences on boards from the perspective of both company founders and board directors. “I’ve almost never seen a problem that couldn’t be solved by better communication and consistency,” Greene says. That's rule No. 2. [This talk took place as part of a training program in corporate governance that a16z organized with the Director’s College at Stanford on March 5, 2015.] Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

20 Mars 201550min

a16z Podcast: Building a Better Board

a16z Podcast: Building a Better Board

Of the 371 board seats that opened up last year (within Fortune 500 companies that is), 39% ended up going to first-time board members. So how did they pull it off? What are some strategies for landing your first board seat -- especially if you don’t fit the typical 'profile' of the other board members? And why do it? In this segment of the a16z Podcast, three veteran executives and board members share their experiences and offer advice about building better public company boards: Shellye Archambeau, who sits on the Nordstrom and Verizon boards; Gerri Elliott, a board member at Whirlpool, Bed Bath and Beyond, and Charlotte Russe; and Raul Vazquez, a Staples board member. Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

16 Mars 201531min

a16z Podcast: What the Apple Watch Is -- and Isn't

a16z Podcast: What the Apple Watch Is -- and Isn't

As technology outgrows the tech industry, it moves from selling utilitarian products to selling things that fulfill other desires or pleasures. The Apple Watch is a perfect example of this market shift, says a16z's Benedict Evans. "It's another step in abstraction, and another step in the importance of delight rather than speeds and feeds." Technology meets desire in this segment of the a16z Podcast. image credit: David Adam Kess / Wikimedia Commons Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

11 Mars 201514min

a16z Podcast: Embracing Sales

a16z Podcast: Embracing Sales

Companies founded by a group of engineers often have a deep-seated mistrust of sales -- or more precisely, salespeople. That was the case at GitHub, says CEO and co-founder Chris Wanstrath: It wasn't until their customers started asking for a sales organization to help guide them that Wanstrath and the GitHub team realized sales wasn't necessarily filled with the fast-talking stereotypes they were used to seeing on TV. Wanstrath joins a16z General Partner Peter Levine to discuss how GitHub finally embraced sales, why good salespeople are like good teachers, and what it takes to sell to developers. Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

5 Mars 201523min

a16z Podcast: Getting Sales Right

a16z Podcast: Getting Sales Right

It may seem like good apps or services sell themselves. That's what the whole viral thing is all about, right? Wrong, says Daniel Shapero, who helped build LinkedIn's enterprise sales team from a small core group to more than 1,200 people all over the globe. Shapero joins a16z General Partner Peter Levine (an engineer who jumped into sales before taking on his first CEO gig, and who now also teaches a class on the topic at Stanford) to discuss the right way to build a sales organization -- from answering the basic question of why sales?, to hiring, compensation ... and the inevitable culture clash that occurs when salespeople and engineers meet. Stay Updated:Find a16z on XFind a16z on LinkedInListen to the a16z Podcast on SpotifyListen to the a16z Podcast on Apple PodcastsFollow our host: https://twitter.com/eriktorenberg Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

4 Mars 201528min

Populärt inom Business & ekonomi

badfluence
framgangspodden
varvet
rss-borsens-finest
svd-ledarredaktionen
avanzapodden
lastbilspodden
rss-dagen-med-di
borsmorgon
rss-svart-marknad
fill-or-kill
affarsvarlden
uppgang-och-fall
rss-kort-lang-analyspodden-fran-di
tabberaset
rss-inga-dumma-fragor-om-pengar
rss-en-rik-historia
rss-badfluence
rikatillsammans-om-privatekonomi-rikedom-i-livet
kapitalet-en-podd-om-ekonomi