Cybersecurity Briefing: November 15, 2020

# Lead Story: Rock County Cyber Attack On November 15, 2020, Rock County, Wisconsin, reported a significant cyber attack that compromised its health information systems. The attack raised alarms about the vulnerabilities in local government systems, especially as they manage sensitive health data amidst the ongoing pandemic. The investigation into the breach is still ongoing, highlighting the urgent need for improvements in cybersecurity protocols across local government entities. As remote work becomes the norm, such vulnerabilities can expose critical infrastructure to severe risks.

# Secondary Items

SolarWinds Hack Under Analysis

While the SolarWinds hack was officially revealed in December 2020, analysts were already investigating its implications in mid-November. Attackers exploited vulnerabilities in the SolarWinds Orion software, affecting thousands of organizations globally, and sparking discussions around supply chain security in cybersecurity. This incident foreshadowed a major breach that would redefine security practices in numerous sectors, including government agencies.

Rising Cyber Attacks Amid Pandemic

As organizations shifted to remote work due to the COVID-19 pandemic, reports in November showed a marked increase in cyber attacks. Cybersecurity incidents surged as attackers targeted the digital infrastructures of companies transitioning to online operations. This shift emphasized the need for enhanced security measures to protect sensitive data and maintain operational integrity during unprecedented times.

Ongoing Vulnerabilities and Exploits

Cybersecurity firms reported an increase in vulnerabilities and exploits during this period, stressing the importance of patching known weaknesses. Organizations faced challenges in securing their systems against previously discovered vulnerabilities, which remained a significant concern. This trend highlights the necessity for continuous monitoring and proactive security measures to fend off potential attacks.

# Analyst Perspective The events leading up to November 15, 2020, underscore a critical juncture in cybersecurity as local governments and organizations grapple with the evolving threat landscape. The surge in attacks during the pandemic, coupled with vulnerabilities in widely used software like SolarWinds, foreshadowed a troubling trajectory for cybersecurity. Organizations must prioritize robust defenses and preparedness strategies to mitigate risks associated with technological shifts and increasing threat actor activity.