SolarWinds
“Downplaying the extent of a material cybersecurity breach is a bad strategy."
"Flat falsehoods" says district judge of public security statement -- but dismisses multiple other SEC claims.
“CVE-2024-28995 is not known to be exploited in the wild as of 9 AM ET on June 11. We expect this to change."
Software firm calls for dismissal of SEC action
SolarWinds’ poor controls... false and misleading statements and omissions, and the other misconduct... would have violated the federal securities laws even if SolarWinds had not experienced a major, targeted cybersecurity attack"
Fresh attacks on US, UK targets being tracked.
Microsoft calls it GoldMax; FireEye calls it SUNSHUTTLE. They're talking about the same thing: sophisticated backdoor that evaded...