From 1f120f646eb1384323ca3748796aaf3ea8086ea4 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 21 Oct 2026 13:05:15 +0000 Subject: [PATCH 1/2] Initial plan From 94dfa50c158eebbf8ce4dafd37feaae71df247af Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 21 Oct 2026 13:07:46 +0000 Subject: [PATCH 2/2] Add SolarWinds supply chain incident Co-authored-by: umutphp <3245166+umutphp@users.noreply.github.com> --- README-tr.md | 15 +++++++++++++++ README.md | 15 +++++++++++++++ 2 files changed, 30 insertions(+) diff --git a/README-tr.md b/README-tr.md index f9d3604..1483030 100644 --- a/README-tr.md +++ b/README-tr.md @@ -25,6 +25,7 @@ Geliştiricilerin faydalı bulabileceği derlenmiş problemler, hatalar ve siste - [20 Temmuz 2016 Stack Overflow'un Çöküşü](#20-temmuz-2016-stack-overflowun-%C3%87%C3%B6k%C3%BC%C5%9F%C3%BC) - [Gitlab Veritabanın Silinmesi](#gitlab-veritaban%C4%B1n-silinmesi) - [PHP Git Commit Olayı](#php-git-commit-olay%C4%B1) + - [SolarWinds Tedarik Zinciri Saldırısı (2020)](#solarwinds-tedarik-zinciri-sald%C4%B1r%C4%B1s%C4%B1-2020) - [4 Ekim Facebook Çöküşü](#4-ekim-facebook-%C3%87%C3%B6k%C3%BC%C5%9F%C3%BC) - [Cloudflare 2019 Çöküşü](#cloudflare-2019-%C3%87%C3%B6k%C3%BC%C5%9F%C3%BC) - [2017 Equifax Veri Sızıntısı](#2017-equifax-veri-s%C4%B1z%C4%B1nt%C4%B1s%C4%B1) @@ -199,6 +200,20 @@ Ek kaynaklar: - [Git commit işleyişinde değişiklikler](https://news-web.php.net/php.internals/113838) - [PHP hadisesi kullanılan araçların doğrulanması gerekliğini gösterdi](https://www.csoonline.com/article/3613593/php-backdoor-attempt-shows-need-for-better-code-authenticity-verification.html) +### SolarWinds Tedarik Zinciri Saldırısı (2020) + +> Kampanyanın arkasındaki grup, FireEye tarafından "Dark Halo" olarak adlandırıldı; SolarWinds'in yazılım tedarik zincirini, Orion BT yönetim platformunun güncellemesine kötü amaçlı arka kapı yerleştirerek ihlal etti. +> +> [Wikipedia](https://en.wikipedia.org/wiki/SolarWinds_supply_chain_attack) + +2020'nin sonlarında, SolarWinds'in yazılım tedarik zincirine yönelik sofistike bir siber saldırı şirketin Orion BT yönetim platformunu ve bunun sonucunda dünya çapında binlerce kuruluşu etkiledi. Saldırganlar, yasal SolarWinds güncellemelerine zararlı bir arka kapı yerleştirerek downstream sistemlere fark edilmeden erişim sağladı. Kampanya, bir güvenlik firması şüpheli etkinliği tespit edip bunu ihlal edilmiş güncelleme sürecine kadar izlediğinde keşfedildi. Bu olay, modern tarihinin en önemli tedarik zinciri saldırılarından biri olarak görülüyor ve yazılım bütünlüğü doğrulaması, satıcı güvenliği ve tehdit izleme konularının önemini yeniden vurguluyor. + +Ek kaynaklar: + +- [SolarWinds tedarik zinciri saldırısı](https://en.wikipedia.org/wiki/SolarWinds_supply_chain_attack) +- [The SolarWinds Cyberattack: What Happened, and Why It Matters](https://www.cisa.gov/news-events/news/solarwinds-cyberattack-what-happened-and-why-it-matters) +- [FireEye: APT29 and the SolarWinds supply chain compromise](https://www.fireeye.com/blog/threat-research/2020/12/apt29-and-the-solarwinds-supply-chain-compromise.html) + ### 4 Ekim Facebook Çöküşü > ... temel nedeni yaptığımız hatalı bir yapılandırma değişikliğiydi. diff --git a/README.md b/README.md index 8e6f5d8..9c79ba4 100644 --- a/README.md +++ b/README.md @@ -25,6 +25,7 @@ A curated list of bugs, problems and failures that developers may find useful to - [Stack Overflow Outage On July 20, 2016](#stack-overflow-outage-on-july-20-2016) - [Gitlab Database Outage](#gitlab-database-outage) - [PHP Git Commit Incident](#php-git-commit-incident) + - [SolarWinds Supply Chain Attack (2020)](#solarwinds-supply-chain-attack-2020) - [October 4th Facebook Outage](#october-4th-facebook-outage) - [Cloudflare Outage 2019](#cloudflare-outage-2019) - [Equifax Data Breach 2017](#equifax-data-breach-2017) @@ -199,6 +200,20 @@ Further readings: - [Changes to Git commit workflow](https://news-web.php.net/php.internals/113838) - [PHP backdoor attempt shows need for better code authenticity verification](https://www.csoonline.com/article/3613593/php-backdoor-attempt-shows-need-for-better-code-authenticity-verification.html) +### SolarWinds Supply Chain Attack (2020) + +> The group behind the campaign, dubbed "Dark Halo" by FireEye, compromised the software supply chain of SolarWinds by planting a malicious backdoor in an update to the Orion IT management platform. +> +> [Wikipedia](https://en.wikipedia.org/wiki/SolarWinds_supply_chain_attack) + +In late 2020, a sophisticated cyberattack against SolarWinds' software supply chain compromised the company's Orion IT management platform and, by extension, thousands of organizations around the world. Attackers inserted a malicious backdoor into legitimate SolarWinds updates, allowing them to gain stealthy access to downstream systems. The campaign was discovered after a security vendor identified suspicious activity and traced it to the compromised update process. The incident is widely regarded as one of the most significant supply-chain attacks in modern history and highlighted the critical importance of software integrity verification, vendor hardening, and threat monitoring. + +Further readings: + +- [SolarWinds supply chain attack](https://en.wikipedia.org/wiki/SolarWinds_supply_chain_attack) +- [The SolarWinds Cyberattack: What Happened, and Why It Matters](https://www.cisa.gov/news-events/news/solarwinds-cyberattack-what-happened-and-why-it-matters) +- [FireEye: APT29 and the SolarWinds supply chain compromise](https://www.fireeye.com/blog/threat-research/2020/12/apt29-and-the-solarwinds-supply-chain-compromise.html) + ### October 4th Facebook Outage > ... its root cause was a faulty configuration change on our end.