Casting a wide intrusion net: Dozens burned with single hack

BOSTON (AP) — The SolarWinds hacking campaign blamed on Russian spies is widely known. A very different and no less alarming series of intrusions also detected in December has gotten considerably less public attention. Highly skilled criminal hackers believed to operate out of Eastern Europe hacked dozens of companies and government agencies on at least four continents by breaking into a single product they all used. The hack of a popular file-transfer program from the Silicon Valley company Accellion highlights a threat that security experts fear may be getting out of hand. That threat is intrusion by top-flight criminal and state-backed hackers into software supply chains and third-party services.