2020年美国联邦政府数据泄露事件
参考资料

1 2 3 4 5 6 7 8 9 10 11 12 13 14  Sanger, David E.; Perlroth, Nicole; Schmitt, Eric. . The New York Times. December 15, 2020  [December 15, 2020]. （原始内容存档于December 18, 2020）.
1 2  Morath, Eric; Cambon, Sarah Chaney. . The Wall Street Journal. January 14, 2021  [2021-03-03]. （原始内容存档于2021-06-07）.
1 2 3 4  . Bloomberg L.P. December 17, 2020  [December 17, 2020]. （原始内容存档于December 18, 2020）.
1 2 3 4 5 6 7 8 9  Sanger, David E.; Perlroth, Nicole; Barnes, Julian E. . The New York Times. December 16, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2 3 4 5  Stubbs, Jack; Satter, Raphael; Menn, Joseph. . Reuters. December 15, 2020  [December 15, 2020]. （原始内容存档于December 15, 2020）.
1 2 3  Fung, Brian. . CNN.   [December 18, 2020]. （原始内容存档于December 17, 2020）.
1 2  Goodin, Dan. . Ars Technica. January 7, 2021  [2021-03-03]. （原始内容存档于2021-02-07）.
↑  . SecurityWeek.com.   [2021-03-03]. （原始内容存档于2021-02-18）.
1 2 3 4 5 6 7 8 9 10  Bing, Christopher. . Reuters. December 14, 2020  [December 14, 2020]. （原始内容存档于December 14, 2020）.
1 2 3 4  O'Brien, Matt. . Houston Chronicle. December 15, 2020  [December 15, 2020]. （原始内容存档于December 14, 2020）.
↑  . BBC. December 15, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  Cook, James. . December 18, 2020  [2021-03-03]. （原始内容存档于2021-04-19） –www.telegraph.co.uk.
1 2 3 4 5 6  . SecurityWeek.com.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
1 2 3 4 5  Goodin, Dan. . Ars Technica. December 15, 2020  [December 17, 2020]. （原始内容存档于December 16, 2020）.
1 2 3  . www.msn.com.   [2021-03-03]. （原始内容存档于2021-04-17）.
1 2 3  Satter, Joseph Menn, Raphael. . December 24, 2020  [2021-03-03]. （原始内容存档于2021-03-24）.
1 2 3 4  Perlroth, Nicole. . December 25, 2020  [2021-03-03]. （原始内容存档于2021-05-31）.
1 2  . ZDNet. December 14, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2  . Deep Instinct. December 16, 2020  [December 17, 2020]. （原始内容存档于December 18, 2020）.
1 2 3 4 5  . Krebs on Security. December 7, 2020  [December 18, 2020]. （原始内容存档于2021-03-11）.
1 2  . Bloomberg. December 18, 2020  [December 18, 2020]. （原始内容存档于2021-03-26）.
1 2 3 4 5 6 7 8 9  Hvistendahl, Mara. . The Intercept. December 17, 2020  [December 18, 2020]. （原始内容存档于December 17, 2020）.
1 2 3 4  . CyberScoop. September 21, 2020  [December 18, 2020]. （原始内容存档于October 30, 2020）.
1 2 3 4  Bing, Christopher. . Reuters. December 13, 2020  [December 14, 2020]. （原始内容存档于December 14, 2020）.
1 2 3 4 5  Nakashima, Ellen. . The Washington Post. December 13, 2020  [December 14, 2020]. （原始内容存档于December 13, 2020）.
1 2 3 4 5 6  . NBC News.   [December 14, 2020]. （原始内容存档于December 14, 2020）.
↑  . BBC. 2020-12-19  [2020-12-19]. （原始内容存档于2021-05-27）.
↑  Washington, Georgi Kantchev in Moscow and Warren P. Strobel in. . Wall Street Journal. 2021-01-02  [2021-01-05]. ISSN 0099-9660. （原始内容存档于2021-01-08） （美国英语）.
1 2 3 4  . Bloomberg L.P. December 14, 2020  [December 16, 2020]. （原始内容存档于December 15, 2020）.
1 2  . December 19, 2020  [2021-03-03]. （原始内容存档于2021-04-06）.
↑  Bing, Christopher. . Reuters. December 14, 2020  [December 14, 2020]. （原始内容存档于December 14, 2020）.
1 2 3  Menn, Joseph. . Reuters. December 18, 2020  [December 17, 2020]. （原始内容存档于December 18, 2020）.
1 2  Wolff, Josephine. . Slate. December 16, 2020  [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  Cimpanu, Catalin. . Zero Day. Ziff-Davis. 2020-12-18  [2020-12-19]. （原始内容存档于2021-02-09）.
1 2 3 4  Satter, Raphael. . December 22, 2020  [2021-03-03]. （原始内容存档于2020-12-28）.
1 2 3  . MSN.   [2021-03-03]. （原始内容存档于2022-01-10）.
1 2  . SC Media. December 15, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2  Gould, Joe. . Defense News. December 17, 2020  [2021-03-03]. （原始内容存档于2021-01-31）.
1 2  Colvin, Jill. . Associated Press. 2020-12-19  [2020-12-20]. （原始内容存档于2021-02-23）.
1 2  Stracqualursi, Veronica. . CNN. 19 December 2020  [19 December 2020]. （原始内容存档于2021-05-13）.
1 2  Christopher Bing, Jack Stubbs, Raphael Satter, Joseph Menn. . 路透社REUTERS. 2021-02-02  [2021-03-03]. （原始内容存档于2021-05-05）.
1 2 3  Kaplan, Fred. . Slate. December 15, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  Perlroth, Nicole; Sanger, David E. . The New York Times. May 16, 2018  [December 16, 2020]. （原始内容存档于December 13, 2020）.
1 2  Brandom, Russell. . The Verge. December 14, 2020  [December 17, 2020]. （原始内容存档于December 15, 2020）.
1 2  . The Independent. December 13, 2020  [December 14, 2020]. （原始内容存档于December 13, 2020）.
↑  Nakashima, Ellen; Miroff, Nick. . The Washington Post. November 17, 2020  [November 18, 2020]. （原始内容存档于November 18, 2020）.
↑  Bowden, John. . The Hill. December 13, 2020  [December 15, 2020]. （原始内容存档于December 15, 2020）.
↑  Cobb, Adrienne. . Forensic News. December 15, 2020  [December 17, 2020]. （原始内容存档于December 18, 2020）.
↑  . Department of Homeland Security. September 7, 2006  [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  Miller, Maggie. . The Hill. November 12, 2020  [December 17, 2020]. （原始内容存档于November 28, 2020）.
↑  Sebenius, Alyza. . Bloomberg.com. 2021-01-13  [2021-01-13]. （原始内容存档于2021-05-17）.
1 2 3  . threatpost.com.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
↑  . December 21, 2020  [December 22, 2020]. （原始内容存档于2021-05-16）.
1 2 3  . Krebs on Security.   [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  Varghese, Sam. . itwire.com.   [December 17, 2020]. （原始内容存档于December 15, 2020）.
↑  . Reuters. December 16, 2020  [December 16, 2020]. （原始内容存档于December 17, 2020） （英语）.
1 2 3 4  McCarthy, Kieren. . The Register.   [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2  Claburn, Thomas. . The Register.   [December 17, 2020]. （原始内容存档于December 18, 2020）.
↑  Novet, Jordan. . CNBC. December 16, 2020  [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  McCarthy, Kieren. . The Register.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
↑  . MarketWatch. Associated Press.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
1 2 3  Menn, Joseph. . Reuters. December 18, 2020  [December 18, 2020]. （原始内容存档于December 18, 2020）.
1 2  Sanger, David E.; Perlroth, Nicole. . The New York Times. December 17, 2020  [December 17, 2020]. （原始内容存档于December 17, 2020）.
1 2  . schneier.com.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
1 2  . The Guardian. December 13, 2020  [December 14, 2020]. （原始内容存档于December 14, 2020）.
↑  . Sky News.   [December 14, 2020]. （原始内容存档于December 14, 2020）.
1 2 3 4  . Wired.   [December 16, 2020]. （原始内容存档于December 17, 2020）.
1 2 3 4  Goodin, Dan. . Ars Technica. December 14, 2020  [December 17, 2020]. （原始内容存档于December 16, 2020）.
1 2  Cimpanu, Catalin. . ZDNet. 2021-01-12  [2021-01-13]. （原始内容存档于2021-03-18）.
↑  Sebastian, Dave. . WSJ. 2021-01-12  [2021-01-13]. （原始内容存档于2021-06-07）.
1 2  Sharwood, Simon. . The Register.   [2021-03-03]. （原始内容存档于2021-02-01）.
1 2  Corfield, Gareth. . The Register. 2021-01-12  [2021-01-13]. （原始内容存档于2021-03-02）.
1 2  Cimpanu, Catalin. . ZDNet.   [December 16, 2020]. （原始内容存档于December 17, 2020）.
↑  Lyons, Kim. . The Verge. December 13, 2020  [December 15, 2020]. （原始内容存档于December 14, 2020）.
↑  . CISA.   [December 15, 2020]. （原始内容存档于December 15, 2020）.
↑  . MSN.   [December 14, 2020]. （原始内容存档于December 18, 2020）.
1 2  Cimpanu, Catalin. . ZDNet.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
1 2 3  . threatpost.com.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
1 2  Timberg, Craig; Nakashima, Ellen. . The Independent. December 16, 2020  [December 16, 2016]. （原始内容存档于December 18, 2020）.
1 2 3  . BBC. December 16, 2020  [December 18, 2020]. （原始内容存档于December 16, 2020）.
↑  . BleepingComputer.   [December 18, 2020]. （原始内容存档于December 17, 2020）.
1 2  . TrustedSec. December 14, 2020  [December 17, 2020]. （原始内容存档于December 15, 2020）.
↑  . The Cloudflare Blog. December 16, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2  . SC Media. December 14, 2020  [December 17, 2020]. （原始内容存档于December 15, 2020）.
↑  . CipherCloud. December 18, 2020  [December 18, 2020]. （原始内容存档于December 18, 2020）.
1 2  . ABC57.   [December 17, 2020]. （原始内容存档于December 18, 2020）.
↑  Dorfman, Zach. . Axios.   [December 16, 2020]. （原始内容存档于December 15, 2020）.
1 2  . MSN.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
↑  . DomainTools.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
↑  . The Seattle Times.   [December 16, 2020]. （原始内容存档于December 18, 2020）.
1 2 3  Menn, Christopher Bing, Jack Stubbs, Raphael Satter, Joseph. . Reuters. 2021-02-03  [2021-02-08]. （原始内容存档于2021-05-05） （英语）.
↑  . Volexity.   [2021-03-03]. （原始内容存档于2021-05-31）.
1 2 3  Tarabay, Jamie. . Bloomberg L.P. December 15, 2020  [December 17, 2020]. （原始内容存档于December 18, 2020）.
↑  . CyberScoop. December 24, 2020  [2021-03-03]. （原始内容存档于2021-01-04）.
↑  . CISA.   [2021-03-03]. （原始内容存档于2021-05-20）.
↑  . The Times of Israel.   [December 14, 2020]. （原始内容存档于December 14, 2020）.
↑  Sanger, David E.; Perlroth, Nicole. . The New York Times. December 8, 2020  [December 15, 2020]. （原始内容存档于December 15, 2020）.
↑  . The Guardian. December 9, 2020  [December 15, 2020]. （原始内容存档于December 16, 2020）.
1 2  . Wired.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  . Newsweek. December 15, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  . FireEye. December 13, 2020  [December 15, 2020]. （原始内容存档于December 15, 2020）.
↑  Paul, Kari. . The Guardian. December 15, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2  Gatlan, Sergiu. . BleepingComputer. 2021-01-12  [2021-01-13]. （原始内容存档于2021-05-29）.
↑  Goodin, Dan. . Ars Technica. 2020-12-07  [2020-12-19]. （原始内容存档于2021-04-21）.
↑  Bing, Christopher. . The Japan Times. December 14, 2020  [December 14, 2020]. （原始内容存档于December 14, 2020）.
1 2  Katz, Justin. . Defense Systems. 2020-12-23  [2021-03-03]. （原始内容存档于2021-03-09）.
↑  . Ars Technica. 2021-01-11  [2021-01-13]. （原始内容存档于2021-04-06）.
↑  Corfield, Gareth. . The Register. 2021-01-12  [2021-01-13]. （原始内容存档于2021-05-18）.
↑  Greenberg, Andy. . Wired. 2021-01-11  [2021-01-13]. （原始内容存档于2021-03-05）.
↑  Roth, Andrew. . the Guardian. 2021-01-11  [2021-01-13]. （原始内容存档于2021-04-13）.
↑  Castronuovo, Celine. . TheHill. 2021-02-02  [2021-02-10]. （原始内容存档于2021-02-12） （英语）.
1 2  . the Guardian. December 19, 2020  [2021-03-03]. （原始内容存档于2021-03-08）.
↑  Byrnes, Jesse. . The Hill. December 19, 2020  [2021-03-03]. （原始内容存档于2021-03-02）.
1 2 3  . Deutsche Welle. December 19, 2020  [2021-03-03]. （原始内容存档于2021-03-03）.
1 2  Axelrod, Tal. . The Hill. December 19, 2020  [2021-03-03]. （原始内容存档于2021-04-26）.
↑  . December 20, 2020  [December 21, 2020]. （原始内容存档于2021-03-11）.
↑  . Los Angeles Times. December 20, 2020  [December 21, 2020]. （原始内容存档于2021-02-22）.
↑  Janfaza, Rachel. . cnn.com. CNN. 21 December 2020  [26 December 2020]. （原始内容存档于2021-01-02）.
↑  Wilkie, Christina. . CNBC. NBCUniversal News Group. 21 December 2020  [22 December 2020]. （原始内容存档于2021-04-12） （英语）.
1 2 3  Sanger, David E. . December 22, 2020  [2021-03-03]. （原始内容存档于2021-03-28）.
↑  . SecurityWeek. Associated Press. 2021-01-05  [2021-01-13]. （原始内容存档于2021-02-11）.
↑  Goodin, Dan. . Ars Technica. January 6, 2021  [2021-03-03]. （原始内容存档于2021-02-07）.
1 2  . the Guardian. 2021-01-05  [2021-01-13]. （原始内容存档于2021-04-13）.
1 2  . Time. 2020-12-15  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  . www.chinaembassy.org.sg.   [2021-03-06].
↑  Richards, Zoë. . Talking Points Memo. December 15, 2020  [December 17, 2020]. （原始内容存档于December 15, 2020）.
↑  Cimpanu, Catalin. . ZDNet.   [December 15, 2020]. （原始内容存档于December 15, 2020）.
↑  Jankowicz, Mia. . Business Insider.   [December 16, 2020]. （原始内容存档于December 16, 2020）.
1 2  . bankinfosecurity.com.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  . The Independent. December 15, 2020  [December 16, 2020]. （原始内容存档于December 18, 2020）.
↑  . AP NEWS. December 14, 2020  [December 16, 2020]. （原始内容存档于December 18, 2020）.
↑  . The Guardian. December 16, 2020  [December 17, 2020]. （原始内容存档于December 17, 2020）.
1 2  . cyber.dhs.gov.   [December 15, 2020]. （原始内容存档于December 15, 2020）.
↑  . MIT Technology Review.   [December 17, 2020]. （原始内容存档于December 18, 2020）.
↑  . Malwarebytes Labs. December 14, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  . Trend Micro.   [December 18, 2020]. （原始内容存档于December 15, 2020）.
↑  . Bloomberg. December 18, 2020  [December 18, 2020]. （原始内容存档于2021-04-19）.
↑  . The Independent. December 18, 2020  [2021-03-03]. （原始内容存档于2021-02-18）.
↑  Satter, Raphael. . December 24, 2020. []
↑  . The World from PRX.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
1 2  . MSN.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  Geller, Eric. . Politico. 2020-12-17  [2020-12-19]. （原始内容存档于2021-01-26）.
1 2 3  Cohen, Zachary; Salama, Vivian; Fung, Brian. . CNN.   [December 18, 2020]. （原始内容存档于December 16, 2020）.
1 2 3  Cimpanu, Catalin. . ZDNet.   [December 17, 2020]. （原始内容存档于December 18, 2020）.
1 2  Dozier, Kimberly. . Time. 2020-12-18  [2020-12-19]. （原始内容存档于2021-05-15）.
1 2  . The New York Times. 2021-01-02  [2021-01-13]. （原始内容存档于2021-06-06）.
1 2  . Politico.   [December 17, 2020]. （原始内容存档于December 17, 2020）.
1 2  . threatpost.com.   [December 17, 2020]. （原始内容存档于December 18, 2020）.
1 2  Goodin, Dan. . Ars Technica. December 17, 2020  [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  . NBC News.   [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  . Sky News.   [2021-03-03]. （原始内容存档于2021-02-18）.
↑  . SC Media. December 21, 2020  [2021-03-03]. （原始内容存档于2021-01-26）.
↑  Nakashima, Ellen. . The Washington Post.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
1 2  . The New York Times. 2020-12-31  [2021-01-13]. （原始内容存档于2021-06-07）.
↑  Paul, Kari. . the Guardian. 2021-01-06  [2021-01-13]. （原始内容存档于2021-04-17）.
↑  . SecurityWeek. Associated Press. January 6, 2021  [2021-01-11]. （原始内容存档于2021-01-22）.
↑  Claburn, Thomas. . The Register. 2021-01-07  [2021-01-12]. （原始内容存档于2021-02-02）.
↑  . The New York Times. 2021-01-06  [2021-01-12]. （原始内容存档于2021-05-31）.
↑  Gatlan, Sergiu. . BleepingComputer. 2021-01-06  [2021-01-13]. （原始内容存档于2021-04-16）.
1 2  Stubbs, Jack; Satter, Raphael; Menn, Joseph. . Reuters. December 15, 2020  [December 18, 2020]. （原始内容存档于December 15, 2020）.
↑  Bing, Christopher. . Reuters. December 13, 2020  [December 18, 2020]. （原始内容存档于December 15, 2020）.
1 2  . BleepingComputer.   [2021-03-03]. （原始内容存档于2021-05-29）.
1 2  Volz, Dustin. . WSJ. 2021-01-07  [2021-01-12]. （原始内容存档于2021-06-07）.
↑  . news.bloomberglaw.com.   [2021-03-03]. （原始内容存档于2021-02-01）.
1 2  Miller, Maggie. . TheHill. 2021-01-07  [2021-01-12]. （原始内容存档于2021-05-03）.
1 2  Krebs, Brian. . Krebs on Security. 2021-01-07  [2021-01-12]. （原始内容存档于2021-03-13）.
1 2  Starks, Tim. . CyberScoop. 2021-01-07  [2021-01-12]. （原始内容存档于2021-03-25）.
↑  Clark, Mitchell. . The Verge. 2021-01-07  [2021-01-12]. （原始内容存档于2021-01-28）.
↑  Kovacs, Eduard. . SecurityWeek. 2021-01-08  [2021-01-12]. （原始内容存档于2021-02-01）.
1 2  Gatlan, Sergiu. . BleepingComputer. 2021-01-07  [2021-01-13]. （原始内容存档于2021-04-16）.
↑  Corfield, Gareth. . The Register. 2021-01-08  [2021-01-13]. （原始内容存档于2021-02-02）.
1 2  Stubbs, Jack; McNeill, Ryan. . Reuters. December 18, 2020  [2021-03-03]. （原始内容存档于2020-12-22）.
1 2  Stubbs, Jack. . Reuters. 2020-12-19  [2021-03-03]. （原始内容存档于2021-02-15）.
1 2  Volz, Kevin Poulsen, Robert McMillan and Dustin. . December 21, 2020  [2021-03-03]. （原始内容存档于2021-06-07）.
↑  . Bloomberg. December 18, 2020  [December 19, 2020]. （原始内容存档于2020-12-21）.
↑  . Bankinfosecurity.com. December 17, 2020  [December 19, 2020]. （原始内容存档于2021-01-18）.
↑  Schmaltz, Trey. . WBRZ. December 18, 2020  [2021-03-03]. （原始内容存档于2021-02-03）.
↑  Menn, Joseph. . Reuters. December 18, 2020  [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  Cimpanu, Catalin. . ZDNet.   [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  Bass, Dina. . Bloomberg L.P.   [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  Novet, Jordan. . CNBC. December 17, 2020  [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  Thomson, Iain. . The Register.   [2021-03-03]. （原始内容存档于2022-04-08）.
↑  . SlashGear. December 18, 2020  [2021-03-03]. （原始内容存档于2021-02-18）.
↑  Robles, C. J. . Tech Times. December 17, 2020  [2021-03-03]. （原始内容存档于2020-12-18）.
↑  Brewster, Thomas. . Forbes.   [2021-03-03]. （原始内容存档于2021-02-18）.
↑  . CNBC. 2021-01-01  [2021-01-13]. （原始内容存档于2021-01-01）. Modifying source code — which Microsoft said the hackers did not do — could have potentially disastrous consequences given the ubiquity of Microsoft products, which include the Office productivity suite and the Windows operating system. But experts said that even just being able to review the code could offer hackers insight that might help them subvert Microsoft products or services.
↑  . BGR. 2021-01-01  [2021-01-13]. （原始内容存档于2021-02-26）. More than two weeks after the hacks, Microsoft disclosed that the attackers were able to access a critical piece of software, the source code from one or more undisclosed products. Microsoft explained in a blog post that the hackers were not able to modify the source code. But even just a glance at a source code from a company like Microsoft might be enough for hackers to develop new attacks that compromise other Microsoft products. ... Microsoft’s blog post is meant to reassure governments and customers, but the fact remains that hackers might be in possession of the kind of secrets they shouldn’t have access to. Time will tell if gaining access to Microsoft’s source code will allow the same team of attackers to create even more sophisticated hacks.
↑  . CPO Magazine. 2021-01-07  [2021-01-13]. （原始内容存档于2021-01-26）. Microsoft disclosed [that] the hacking group behind the SolarWinds attack also viewed Microsoft source code for unnamed products. ... Microsoft, however, downplayed the breach, saying that the security of its products does not depend on the secrecy of its source code. Contrarily, Microsoft source code for most high-profile products remains to be among the most jealously guarded corporate secrets, shared only with a few trusted customers and governments.
↑  Stanley, Alyse. . Gizmodo. 2020-12-31  [2021-01-13]. （原始内容存档于2021-01-27）. While hackers may not have been able to change Microsoft’s source code, even just sneaking a peek at the company’s secret sauce could have disastrous consequences. Bad actors could use that kind of insight into the inner workings of Microsoft’s services to help them circumvent its security measures in future attacks. The hackers essentially scored blueprints on how to potentially hack Microsoft products.
↑  Bradley, Susan. . Computerworld. 2021-01-04  [2021-01-13]. （原始内容存档于2021-03-22）. Microsoft investigated further and found that while the attackers were not able to inject themselves into Microsoft’s ADFS/SAML infrastructure, 'one account had been used to view source code in a number of source code repositories. The account did not have permissions to modify any code or engineering systems and our investigation further confirmed no changes were made.' This is not the first time Microsoft’s source code has been attacked or leaked to the web. In 2004, 30,000 files from Windows NT to Windows 2000 leaked onto the web via a third party.  Windows XP reportedly leaked online last year.
↑  Satter, Raphael. . Business Insider. 2020-12-31  [2021-01-13]. （原始内容存档于2021-01-14）. Ronen Slavin, [chief technology officer at source code protection company Cycode], said a key unanswered question was which source code repositories were accessed. ... Slavin said he was also worried by the possibility that the SolarWinds hackers were poring over Microsoft's source code as prelude for something more ambitious. 'To me the biggest question is, "Was this recon for the next big operation?"' he said.
↑  Spring, Tom. . Threatpost. 2021-01-12  [2021-01-13]. （原始内容存档于2021-04-01）. Last month, Microsoft said state-sponsored hackers had compromised its internal network and leveraged additional Microsoft products to conduct further attacks.
↑  . U.S. 2021-01-12  [2021-01-13]. （原始内容存档于2021-01-12）. Three cybersecurity investigators, who spoke on condition of anonymity to discuss details of an ongoing probe, told Reuters they suspected the hackers who compromised Mimecast were the same group that broke into U.S. software maker SolarWinds and a host of sensitive U.S. government agencies.
↑  . SecurityWeek.Com. 2021-01-13  [2021-01-13]. （原始内容存档于2021-03-17）.
↑  Seals, Tara. . Threatpost. 2021-01-12  [2021-01-13]. （原始内容存档于2021-03-17）.
↑  . SC Media. 2021-01-12  [2021-01-13]. （原始内容存档于2021-02-27）.
↑  Spadafora, Anthony. . TechRadar. 2021-01-12  [2021-01-13]. （原始内容存档于2021-01-13）. The reason that Mimecast may have been attacked by the same threat actor behind the SolarWinds hack is due to the fact that these hackers often add authentication tokens and credentials to Microsoft Active Directory domain accounts in order to maintain persistence on a network and to achieve privilege escalation.
↑  McMillan, Robert. . WSJ. 2021-01-13  [2021-01-13]. （原始内容存档于2021-06-07）. The Mimecast hackers used tools and techniques that link them to the hackers who broke into Austin, Texas-based SolarWinds Corp., according to people familiar with the investigation. The link to the SolarWinds hackers was reported earlier by Reuters.
↑  . U.S. 2021-01-26  [2021-02-01]. （原始内容存档于2021-03-04）. This week, four new cyber-security vendors -- Mimecast, Qualys, Palo Alto Networks, and Fidelis -- have added their names to the list of companies that have installed trojanized versions of the SolarWinds Orion app.
↑  . GitHub.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  . BleepingComputer.   [December 17, 2020]. （原始内容存档于December 16, 2020）.
↑  . CyberScoop. December 23, 2020  [2021-03-03]. （原始内容存档于2021-02-16）.
↑  Brandom, Russell. . The Verge. December 15, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  Varghese, Sam. . www.itwire.com.   [2021-03-03]. （原始内容存档于2020-12-14）.
↑  . SecurityWeek.Com. 2021-01-06  [2021-01-13]. （原始内容存档于2021-02-01）.
↑  McCarthy, Kieren. . The Register. 2021-01-05  [2021-01-13]. （原始内容存档于2021-03-17）.
↑  . SecurityWeek.Com. 2021-01-08  [2021-01-13]. （原始内容存档于2021-02-19）.
↑  Vaughan-Nichols, Steven J. . ZDNet. 2021-01-14  [2021-01-15]. （原始内容存档于2021-03-10）.
↑  . WTVD. December 14, 2020  [December 15, 2020]. （原始内容存档于December 14, 2020）.
↑  Geller, Eric. . Politico.   [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  . Newsweek. December 14, 2020  [December 16, 2020]. （原始内容存档于December 16, 2020）.
↑  . SecurityWeek.com.   [December 18, 2020]. （原始内容存档于December 18, 2020）.
↑  Satter, Raphael. . December 24, 2020  [2021-03-03]. （原始内容存档于2021-01-01）.
↑  Daugherty, Alex. . Miami Herald. December 18, 2020  [2021-03-03]. （原始内容存档于2020-12-27）.
↑  Dwyer, Colin. . NPR. December 19, 2020  [December 20, 2020]. （原始内容存档于2021-06-03）.
↑  . CyberScoop. December 23, 2020  [2021-03-03]. （原始内容存档于2021-01-26）.
↑  . Gizmodo.   [2021-03-03]. （原始内容存档于2021-01-21）.
↑  . The Guardian. December 17, 2020  [December 18, 2020]. （原始内容存档于December 17, 2020）.
↑  Jill Colvin & Matthew Lee, Trump downplays Russia in first comments on hacking campaign （页面存档备份，存于）, Associated Press (December 19, 2020).
↑  Justin Sink, Trump Downplays Huge Hack Tied to Russia, Suggests China （页面存档备份，存于）, Bloomberg News (December 19, 2020).
↑  Canales, Katie. . Business Insider. December 19, 2020  [December 20, 2020]. （原始内容存档于2020-12-20）.
↑  Bing, Christopher. . Reuters. 2020-12-19  [2021-03-03]. （原始内容存档于2021-01-04）.
↑  . MSN.   [December 17, 2020]. （原始内容存档于December 18, 2020）.
↑  Pierce, Charles P. . Esquire. December 15, 2020  [December 17, 2020]. （原始内容存档于December 17, 2020）.
↑  'They potentially have the capacity to cripple us': Romney raises alarm about cyberattack tied to Russia （页面存档备份，存于）, USA Today (December 20, 2020).
↑  Satter, Raphael. . Reuters. 2020-12-20  [2020-12-20]. （原始内容存档于2021-04-07） （英语）.
↑  . December 22, 2020  [2021-03-03]. （原始内容存档于2022-04-07）.
↑  Lewis, Simon. . Reuters. December 23, 2020  [2021-03-03]. （原始内容存档于2021-01-21）.