Security deficiencies and business practices have researchers and officials furious at Microsoft for enabling an espionage operation.

The breach is separate from the SolarWinds fallout and had not been previously publicly disclosed.

New infrastructure, old tricks.

The legislation eventually garnered widespread support on its way to becoming law, but much remains unresolved.

The measure, under which CISA would handle the incident reporting, must still win House approval.

The research reveals ongoing efforts by the SolarWinds hackers to steal data and find ways to access additional victims.

The May executive order was drafted as a result of the SolarWinds cyber-espionage campaign.

Russia's SVR intelligence agency did some "innovative, novel work" in the latest campaign, he added.

It's an area of weakness that the SolarWinds hackers exploited, officials have said.

The company detected a compromised server that was quickly taken offline, it told the Securities and Exchange Commission.