Microsoft: SolarWinds hackers gain powerful ‘MagicWeb’ authentication bypass
Image: GettyMicrosoft has warned that the hacking group behind the 2020 SolarWinds supply chain attack have a new technique for bypassing authentication in corporate networks.The trick, a highly specialized capability Microsoft calls "MagicWeb", allows the actors to keep a firm position in a network even as defenders attempt to eject them. However, unlike past attacks by the group, which Microsoft tracks as Nobelium, they are not employing supply chain attacks to deploy MagicWeb, but rather are abusing admin…