[algore]

” The attackers may have used their own code signing private key.”

that fact that you even said that means you are totally clueless.

but don’t let that get in the way of your narrative.

[palmer]

I don't have a narrative, you do. I looked up the attack and it was just a compromise of the integration environment, so they piggybacked on normal code updates. Their shotgun result may have benefitted some adversaries but more targetted attacks on other vulnerable SolarWinds products will be harder to detect.