CISA warns that a fresh critical-severity SolarWinds vulnerability leading to unauthenticated RCE has been exploited in attacks.

Researchers at Huntress and Microsoft have shared findings from their analysis of a new SolarWinds Web Help Desk vulnerability.

Attacks targeting SolarWinds Web Help Desk instances in December 2025 might have exploited recently patched vulnerabilities as zero-days.

REDMOND, Wash. — The same Russian group behind the SolarWinds hacking campaign launched another wave of attacks this week on government agencies, think tanks, consultants, and non-governmental ...

Analysis of real-world incidents reveals that attackers are chaining multiple flaws to compromise the ticketing and support ...

We are seeing exploitation of SolarWinds Web Help Desk via CVE‑2025‑40551 and CVE‑2025‑40536 that can lead to domain ...

The U.S. Securities and Exchange Commission (SEC) has dropped remaining litigation against software vendor SolarWinds regarding the infamous hack that affected the likes of Nvidia, Cisco, Ciena, and ...

SolarWinds and the SEC have to provide the court with a written status report on Sept. 12 if the settlement has not been reached by then. A federal district judge signed off on a request by SolarWinds ...