Supernova Malware Analysis Links Chinese Threat Group Spiral to SolarWinds Server Hacks

According to researchers, the CVE-2020-10148 authentication bypass vulnerability, which leads to the remote execution of API commands, in the SolarWinds Orion API has been exploited by Spiral.