Like during his first term we had SolarWinds.
September 24, 2026 at 1:41 AM
Like during his first term we had SolarWinds.
I've been The Solarwinds Dude at %dayjob% for 13 years so yeah, same...
September 24, 2026 at 5:13 AM
I've been The Solarwinds Dude at %dayjob% for 13 years so yeah, same...
I remember the SolarWinds hack quite well as had dealt with the fallout when working as a federal contractor.
September 24, 2026 at 4:28 AM
I remember the SolarWinds hack quite well as had dealt with the fallout when working as a federal contractor.
The SEC just let SolarWinds off the hook for allegedly hiding vulnerabilities that were exploited in a major 2020 hack: www.reuters.com/legal/govern...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
The Untold Story of the Boldest Supply-Chain Hack Ever
The attackers were in thousands of corporate and government networks. They might still be there now. Behind the scenes of the SolarWinds investigation.
www.wired.com
November 20, 2025 at 10:30 PM
The SEC just let SolarWinds off the hook for allegedly hiding vulnerabilities that were exploited in a major 2020 hack: www.reuters.com/legal/govern...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
Read @kimzetter.bsky.social's deep dive for @wired.com on the SolarWinds breach here: www.wired.com/story/the-un...
NEW FOIA Files newsletter is out!
There's been a ton of news the past week so I'm offering up a palette cleanser. I finally got my hands on the once-secret internal reports from the Treasury Dept’s IG about its investigation into the SolarWinds hack in 2020
www.bloomberg.com/news/newslet...
There's been a ton of news the past week so I'm offering up a palette cleanser. I finally got my hands on the once-secret internal reports from the Treasury Dept’s IG about its investigation into the SolarWinds hack in 2020
www.bloomberg.com/news/newslet...
Once-Secret Treasury Memos Detail Agency Response to SolarWinds Hack
The Treasury Department’s inspector general released dozens of pages of internal investigative memos to FOIA Files about its probe into the SolarWinds hack in December 2020, which compromised the emai...
www.bloomberg.com
January 31, 2025 at 3:33 PM
NEW FOIA Files newsletter is out!
There's been a ton of news the past week so I'm offering up a palette cleanser. I finally got my hands on the once-secret internal reports from the Treasury Dept’s IG about its investigation into the SolarWinds hack in 2020
www.bloomberg.com/news/newslet...
There's been a ton of news the past week so I'm offering up a palette cleanser. I finally got my hands on the once-secret internal reports from the Treasury Dept’s IG about its investigation into the SolarWinds hack in 2020
www.bloomberg.com/news/newslet...
omg TIL i'm getting rid of node-gyp asap
github.com/solarwinds/zig…
github.com/solarwinds/zig…
GitHub - solarwinds/zig-build: Node.js native addon build and cross-compile library using Zig
Node.js native addon build and cross-compile library using Zig - solarwinds/zig-build
github.com
March 10, 2026 at 12:22 AM
omg TIL i'm getting rid of node-gyp asap
github.com/solarwinds/zig…
github.com/solarwinds/zig…
Solarwinds are trying to patch a critical vulnerability that was introduced by a patch that had a critical vulnerability that patched another critical vulnerability that came from a patch that had a critical vulnerability meant to patch q critical vulnerability.
www.securityweek.com/solarwinds-m...
SolarWinds Makes Third Attempt at Patching Exploited Vulnerability
SolarWinds announced a hotfix for RCE vulnerability in Web Help Desk, and this is the third time it attempts to address the issue.
www.securityweek.com
September 24, 2025 at 6:09 AM
Solarwinds are trying to patch a critical vulnerability that was introduced by a patch that had a critical vulnerability that patched another critical vulnerability that came from a patch that had a critical vulnerability meant to patch q critical vulnerability.
www.securityweek.com/solarwinds-m...
Plus: The SEC lets SolarWinds off the hook, Microsoft stops a historic DDoS attack, and FBI documents reveal the agency spied on an immigration activist Signal group in New York City. www.wired.com/story/securi...
US Border Patrol Is Spying on Millions of American Drivers
Plus: The SEC lets SolarWinds off the hook, Microsoft stops a historic DDoS attack, and FBI documents reveal the agency spied on an immigration activist Signal group in New York City.
www.wired.com
November 22, 2025 at 11:35 AM
Plus: The SEC lets SolarWinds off the hook, Microsoft stops a historic DDoS attack, and FBI documents reveal the agency spied on an immigration activist Signal group in New York City. www.wired.com/story/securi...
Know I understand why Solarwinds don’t have a Bug Bounty program.
Solarwinds are trying to patch a critical vulnerability that was introduced by a patch that had a critical vulnerability that patched another critical vulnerability that came from a patch that had a critical vulnerability meant to patch q critical vulnerability.
www.securityweek.com/solarwinds-m...
SolarWinds Makes Third Attempt at Patching Exploited Vulnerability
SolarWinds announced a hotfix for RCE vulnerability in Web Help Desk, and this is the third time it attempts to address the issue.
www.securityweek.com
September 24, 2025 at 6:40 AM
Know I understand why Solarwinds don’t have a Bug Bounty program.
Die Monitoring-Lösung für IT-Infrastrukturen SolarWinds Observability Self-Hosted ist unter bestimmten Voraussetzungen verwundbar. #Security
Sicherheitspatch gegen Schadcode repariert SolarWinds Observability Self-Hosted
Die Monitoring-Lösung für IT-Infrastrukturen SolarWinds Observability Self-Hosted ist unter bestimmten Voraussetzungen verwundbar.
www.heise.de
September 24, 2026 at 8:26 AM
Die Monitoring-Lösung für IT-Infrastrukturen SolarWinds Observability Self-Hosted ist unter bestimmten Voraussetzungen verwundbar. #Security
“volume of security issues being identified over the last month have [sic] outstripped the capacity of Engineering teams to resolve.”
Most orgs are like this.
Didn’t expect to see CISO liability before software liability, but here we are.
#solarwinds
therecord.media/solarwinds-c...
Most orgs are like this.
Didn’t expect to see CISO liability before software liability, but here we are.
#solarwinds
therecord.media/solarwinds-c...
SEC charges SolarWinds CISO with fraud for misleading investors before major cyberattack
The Securities and Exchange Commission (SEC) announced on Monday evening that it plans to charge SolarWinds Chief Information Security Officer Timothy Brown with fraud for his role in allegedly lying ...
therecord.media
October 31, 2023 at 2:39 AM
“volume of security issues being identified over the last month have [sic] outstripped the capacity of Engineering teams to resolve.”
Most orgs are like this.
Didn’t expect to see CISO liability before software liability, but here we are.
#solarwinds
therecord.media/solarwinds-c...
Most orgs are like this.
Didn’t expect to see CISO liability before software liability, but here we are.
#solarwinds
therecord.media/solarwinds-c...
SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.
#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec
#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec
SolarWinds Observability Vulnerabilities Enable Remote Code Execution
TL;DR On September 22, 2026, SolarWinds released software updates to resolve critical security flaws. These SolarWinds Observability vulnerabilities allow unauthenticated attackers to execute arbitrary code remotely under specific conditions. Therefore, administrators must upgrade their deployments immediately to protect corporate monitoring systems. Why It Matters Industry estimates suggest that thousands of enterprise environments rely on SolarWinds monitoring platforms daily. Consequently, remote execution flaws in these systems create significant risks for corporate networks.
securityonline.info
September 23, 2026 at 1:02 AM
SolarWinds Observability vulnerabilities allow RCE via CVE-2026-28324. Update to version 2026.2.3 to secure your monitoring infrastructure today.
#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec
#SolarWinds #Cybersecurity #CVE202628324 #CVE202628325 #RCE #Infosec
Big news on the corporate accountability (or lack thereof) front: The SEC just dropped its case against SolarWinds and its former CISO for allegedly defrauding investors about the company's cybersecurity posture prior to its major hack. www.sec.gov/enforcement-...
SEC.gov | SolarWinds Corp. and Timothy G. Brown
www.sec.gov
November 20, 2025 at 10:23 PM
Big news on the corporate accountability (or lack thereof) front: The SEC just dropped its case against SolarWinds and its former CISO for allegedly defrauding investors about the company's cybersecurity posture prior to its major hack. www.sec.gov/enforcement-...
SolarWinds – yes, that SolarWinds – left hardcoded credentials in its Web Help Desk product that can be used by remote, unauthenticated attackers to log into vulnerable instances, access internal functionality, and modify sensitive data
Hotfix to install... www.theregister.com/2024/08/22/h...
Hotfix to install... www.theregister.com/2024/08/22/h...
SolarWinds left hardcoded credentials in helpdesk product
Why go to the effort of backdooring code when devs will basically do it for you accidentally anyway
www.theregister.com
August 23, 2024 at 12:08 AM
SolarWinds – yes, that SolarWinds – left hardcoded credentials in its Web Help Desk product that can be used by remote, unauthenticated attackers to log into vulnerable instances, access internal functionality, and modify sensitive data
Hotfix to install... www.theregister.com/2024/08/22/h...
Hotfix to install... www.theregister.com/2024/08/22/h...
January 30, 2025 at 1:03 PM
Ein Sicherheitspatch schließt eine Schwachstelle in SolarWinds Access Rights Manager. Bislang gibt es keine Hinweise auf Attacken. #Security
Unberechtigte Zugriffe auf SolarWinds Access Rights Manager möglich
Ein Sicherheitspatch schließt eine Schwachstelle in SolarWinds Access Rights Manager. Bislang gibt es keine Hinweise auf Attacken.
www.heise.de
September 21, 2026 at 10:25 AM
Ein Sicherheitspatch schließt eine Schwachstelle in SolarWinds Access Rights Manager. Bislang gibt es keine Hinweise auf Attacken. #Security
Shortly after the 2020 Solarwinds breach I was taken on a tour to check out a certain company's network infrastructure and the breach got brought up and the company rep said to us, with his whole chest, "Oh, yeah, our solarwinds deployment was so out of date that we weren't impacted"
November 3, 2025 at 8:48 PM
Shortly after the 2020 Solarwinds breach I was taken on a tour to check out a certain company's network infrastructure and the breach got brought up and the company rep said to us, with his whole chest, "Oh, yeah, our solarwinds deployment was so out of date that we weren't impacted"
Blog: "Fallos críticos de SolarWinds permiten ejecución remota de código en servidores de observabilidad"
Fallos críticos de SolarWinds permiten ejecución remota de código en servidores de observabilidad
Blog sobre informática, tecnología y seguridad con manuales, tutoriales y documentación sobre herramientas y programas
blog.elhacker.net
September 24, 2026 at 2:02 AM
Blog: "Fallos críticos de SolarWinds permiten ejecución remota de código en servidores de observabilidad"
The President Ordered a Board to Probe a Massive Russian Cyberattack. It Never Did.
By not investigating the underlying weakness in Microsoft software that was key to the SolarWinds hack, the Cyber Safety Review Board missed an opportunity to prevent future attacks, experts say.
By not investigating the underlying weakness in Microsoft software that was key to the SolarWinds hack, the Cyber Safety Review Board missed an opportunity to prevent future attacks, experts say.
The President Ordered a Board to Probe a Massive Russian Cyberattack. It Never Did.
By not investigating the underlying weakness in Microsoft software that was key to the SolarWinds hack, the Cyber Safety Review Board missed an opportunity to prevent future attacks, experts say.
www.propublica.org
July 8, 2024 at 12:31 PM
The President Ordered a Board to Probe a Massive Russian Cyberattack. It Never Did.
By not investigating the underlying weakness in Microsoft software that was key to the SolarWinds hack, the Cyber Safety Review Board missed an opportunity to prevent future attacks, experts say.
By not investigating the underlying weakness in Microsoft software that was key to the SolarWinds hack, the Cyber Safety Review Board missed an opportunity to prevent future attacks, experts say.
Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'
Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'
When cloud customers don't clean up after themselves, part 97
Abandoned AWS S3 buckets could be reused to hijack the global software supply chain in an attack that would make Russia's "SolarWinds adventures look amateurish and insignificant,"…
dlvr.it
February 4, 2025 at 11:06 AM
Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'
February 11, 2025 at 4:35 PM
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
www.securityweek.com/solarwinds-p...
#Kyberturvallisuus #Kyber #Tilannekuva
www.securityweek.com/solarwinds-p...
#Kyberturvallisuus #Kyber #Tilannekuva
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds has patched two bugs in Observability Self-Hosted that could lead to unauthenticated remote code execution.
www.securityweek.com
September 24, 2026 at 11:46 AM
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
www.securityweek.com/solarwinds-p...
#Kyberturvallisuus #Kyber #Tilannekuva
www.securityweek.com/solarwinds-p...
#Kyberturvallisuus #Kyber #Tilannekuva
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
www.securityweek.com/solarwinds-p...
www.securityweek.com/solarwinds-p...
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds has patched two bugs in Observability Self-Hosted that could lead to unauthenticated remote code execution.
www.securityweek.com
September 24, 2026 at 12:46 PM
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
www.securityweek.com/solarwinds-p...
www.securityweek.com/solarwinds-p...
SolarWinds Observability Vulnerabilities Fixed: Critical RCE Flaws Patched（SolarWinds Observabilityに重大な脆弱性、認証不要RCEにつながる2件を修正） #SecurityOnline (Sep 23)
securityonline.info/solarwinds-o...
securityonline.info/solarwinds-o...
https://securityonline.info/solarwinds-observability-vulnerabilities-fixed/
securityonline.info
September 24, 2026 at 3:15 AM
SolarWinds Observability Vulnerabilities Fixed: Critical RCE Flaws Patched（SolarWinds Observabilityに重大な脆弱性、認証不要RCEにつながる2件を修正） #SecurityOnline (Sep 23)
securityonline.info/solarwinds-o...
securityonline.info/solarwinds-o...