SolarWinds
-
Blog
These tech firms downplayed the impact of the SolarWinds hack – now they’ve been fined by the SEC
The US Securities and Exchange Commission (SEC) has charged four major tech firms with failing to tell the truth about their exposure to the 2020 SolarWinds hack. Unisys, Avaya Holdings, Check Point Software, and Mimecast have agreed to pay civil penalties of $4 million, $1 million, $995,000, and $990,000 respectively. “As today’s enforcement actions reflect, while public companies may become…
Read More » -
Blog
SEC charges tech companies for downplaying SolarWinds breaches
The SEC has charged four companies—Unisys Corp, Avaya Holdings, Check Point Software, and Mimecast—for allegedly misleading investors about the impact of their breaches during the massive 2020 SolarWinds Orion hack. “The Securities and Exchange Commission today charged four current and former public companies – Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd, and Mimecast Limited – with making materially…
Read More » -
Blog
SolarWinds fixes hardcoded credentials flaw in Web Help Desk
SolarWinds has released a hotfix for a critical Web Help Desk vulnerability that allows attackers to log into unpatched systems using hardcoded credentials. Web Help Desk (WHD) is an IT help desk software widely used by government agencies, large corporations, and healthcare and education organizations to automate and streamline help desk management tasks. SolarWinds’ IT management products are used by over 300,000…
Read More » -
Blog
SolarWinds urges customers to patch critical Web Help Desk flaw
SolarWinds has issued a warning to customers after the discovery of a critical vulnerability in the firm’s Web Help Desk solution. The vulnerability, tracked as CVE-2024-28986, is a Java deserialization vulnerability that could be exploited to achieve remote code execution, the company confirmed in an advisory last week. “SolarWinds Web Help Desk was found to be susceptible to a Java…
Read More » -
Blog
CISA warns critical SolarWinds RCE bug is exploited in attacks
Image: MidjourneyCISA warned on Thursday that attackers are exploiting a recently patched critical vulnerability in SolarWinds’ Web Help Desk solution for customer support. Web Help Desk (WHD) is IT help desk software widely used by large corporations, government agencies, and healthcare and education organizations worldwide to centralize, automate, and streamline help desk management tasks. Tracked as CVE-2024-28986, this Java deserialization…
Read More »