SolarWinds
“It’s been a long road” says SolarWinds CISO Tim Brown
Expect this to get exploited - like the bug before it...
“Downplaying the extent of a material cybersecurity breach is a bad strategy."
"Flat falsehoods" says district judge of public security statement -- but dismisses multiple other SEC claims.
“CVE-2024-28995 is not known to be exploited in the wild as of 9 AM ET on June 11. We expect this to change."
Software firm calls for dismissal of SEC action
SolarWinds’ poor controls... false and misleading statements and omissions, and the other misconduct... would have violated the federal securities laws even if SolarWinds had not experienced a major, targeted cybersecurity attack"
