The security breach at network management software firm SolarWinds© consisted of malicious code being inserted into software updates to SolarWinds' Orion© network monitoring platform. These updates were then pushed globally, potentially creating entry points for further intrusion on affected customers' networks.

There are no Pentaho products that use or include the affected software from SolarWinds. 

Nonetheless, we strongly urge our customers to assess their risk for vulnerability in light of this news. The following resources are available to aid this, and may contain important information regarding the detection and mitigation of malicious activity stemming from this breach:

• Official Security Advisory from SolarWinds
• Microsoft Security Response Center: Customer Guidance on Recent Nation-State Cyber Attacks
• FireEye Threat Research Analysis