Attack path
Malicious code inside signed, trusted Orion updates reached customer networks.
Confirmed impact
Long-lived covert access to government and private networks, including data and credential theft.
Response
Emergency direction to isolate affected versions, rotate secrets and rebuild trust.