Tag: SolarWinds
-
The Register: Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures
Source URL: https://www.theregister.com/2024/10/22/sec_fines_four_tech_firms/ Source: The Register Title: Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures Feedly Summary: Unisys, Avaya, Check Point, and Mimecast settled with the agency without admitting or denying wrongdoing Four high-profile tech companies reached an agreement with the Securities and Exchange Commission to pay millions of dollars in…
-
Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog
Source URL: https://www.cisa.gov/news-events/alerts/2024/10/15/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability These…
-
The Register: SolarWinds left critical hardcoded credentials in its Web Help Desk product
Source URL: https://www.theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd/ Source: The Register Title: SolarWinds left critical hardcoded credentials in its Web Help Desk product Feedly Summary: Why go to the effort of backdooring code when devs will basically do it for you accidentally anyway SolarWinds left hardcoded credentials in its Web Help Desk product that can be used by remote, unauthenticated…