NVIDIA and Intel used infected SolarWinds tool

Last week news broke about one of the most impressive supply-chain hacks ever seen. State-backed hackers managed to infiltrate SolarWinds and compromised Orion, a network management tool that's used by a lot of enterprises, non-profits, government entities, etc. The origin of the hack is unknown but US officials blame Russia.

The list of companies using the backdoored software continues to grow. Engadget reports both Intel and NVIDIA used the compromised software. However, both companies claim they found no evidence of suspicious activity on their network.

The Wall Street Journal now reports it has new evidence that at least two dozen companies — including Nvidia, Intel, Cisco and Belkin — used SolarWinds’ Orion software. The compromised software gave hackers “potential access to much sensitive corporate and personal data,” according to the report.

The fact that these firms were impacted in some way isn’t necessarily surprising. SolarWinds has hundreds of thousands of customers, including multiple government agencies and hundreds of Fortune 500 companies, including Microsoft. SolarWinds has reported that up to 18,000 of its customers were using the malicious version of Orion, but hasn’t disclosed exact figures. For companies that were using it. it’s also unclear just how much damage may have been done, as the firms are still investigating.