Microsoft’s Threat Intelligence Center (MSTIC) reported on 13 July that SolarWinds software was attacked with a zero-day exploit by a group of hackers named “DEV-0322.” The hackers were focused on SolarWinds’ Serv-U FTP software, with the presumed goal of accessing the company’s clients in the US defense industry. It seems the hackers were attempting to gain Serv-U administrative permissions and perform other suspicious activities. SolarWinds reported the zero-day exploit, noting that all Serv-U releases from 5 May and earlier contained the vulnerability. A hotfix was released to address the issue and the exploit has been patched, but Microsoft writes that if Serv-U’s Secure Shell (SSH) protocol connected to the internet, the hackers could “remotely run arbitrary code with privileges”.