Among those testifying at the hearing were the new Chief Executive Officer of SolarWinds, Sudhakar Ramakrishna, who took weeks after discovering the breach and has since been peeling off layers of infiltration. He told the Senate committee that the code was abolished from the company’s products. But it is of little use Government agencies and companies that were already dissolved, Because once hackers are inside their target computer network, they are free to roam.
Mr. Ramakrishna also said that SolarWind was still unclear how Russian hackers were developing software that was embedding itself there in early 2019. Asked about the possibility that software tools created by JetBrains, which accelerate development and testing. Shri Ramakrishna said that there is still no evidence. The New York Times reported In January that JetBrains was under investigation, but senior executives of the company, some of whom are Russians, said there was no evidence.
Mr Smith, who has called for a “Digital Geneva Conference” that would begin creating standards to prevent certain types of attacks, estimated that “hacking involved at least a thousand very skilled, capable engineers”.
“It was an act of negligence, in my opinion,” he said, as it infected thousands of systems in which the Russians were not interested in giving access to only a few. “This was done in a very indiscriminate manner.”
Mr. Warner, Florida’s Senator Marco Rubio, the ranking Republican on the committee, and others repeatedly noted that Amazon – which runs the CIA’s network cloud services and is seeking other major federal contracts – was the only company to Refused to send a senior executive to explain his role in hacking. Amazon has not publicly said anything about what it knew about the command-and-control operation being run from its servers in the United States.
This is an important issue, as hackers understood that US intelligence agencies were prohibited from investigating network activity in the United States. So by launching attacks within US borders, they were taking advantage of domestic privacy protection to avoid detection.
Many senators said they were concerned that such a technique, once known, would be widely used by others. “The bottom line question is how did we miss it, and what are we still missing?” Mr. Rubio said.