The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

Microsoft's Defender Security Research Team has identified a series of phishing campaigns in which an unknown attacker used digitally signed malware masked as common workplace applications to deploy ...

Chuck Brooks, president of Brooks Consulting International and a GovCon Expert, outlines how emerging tech is reshaping cyber ...

For the repeated time, attackers have targeted systems with the ticketing software SolarWinds Web Help Desk (WHD). Following successful attacks, it is to be assumed that PCs are fully compromised.

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. After SolarWinds, the CISO job moved out of the engine room and into the spotlight—where ...

A critical vulnerability in SolarWinds’ Web Help Desk service has been added to the US Cybersecurity and Infrastructure Security Agency’s (Cisa) Known Exploited Vulnerabilities (Kev) catalogue as ...

A US security agency has warned SolarWinds Web Help Desk users that a remote code execution (RCE) vulnerability patched by the vendor last week is being actively exploited. The US Cybersecurity and ...

SolarWinds has released security updates to patch critical authentication bypass and remote command execution vulnerabilities in its Web Help Desk IT help desk software. The authentication bypass ...

Another round of critical Web Help Desk flaws highlights how SolarWinds’ legacy code and past breaches continue to haunt IT and security leaders. SolarWinds is yet again disclosing security ...

Late last month, the U.S. Securities and Exchange Commission agreed to dismiss claims that the software company concealed cyber vulnerabilities in the lead-up to the high-profile 2020 Sunburst attack.

The Securities and Exchange Commission’s (SEC) case against SolarWinds and its chief information security officer (CISO), Timothy Brown, ended abruptly on November 20, 2025, when the SEC agreed to ...

The Securities and Exchange Commission on Thursday formally dismissed its high-profile civil enforcement action against technology vendor SolarWinds and its chief information security officer, Timothy ...