Curated security research, vulnerabilities, advisories and tools for practitioners.

#solarwinds

Security coverage tagged solarwinds.

1.

Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown

blog | 2026-10-16 16:30 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #interview

2.

Signature Optional - Analysis of CVE-2026-28323

vulnerability | 2026-08-26 00:00 | CVE-2026-28323 | bishopfox.com | Original ↗ | .md | #solarwinds | #vulnerability-analysis | #patch-analysis

3.

A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318

vulnerability | High | Actively exploited | 2026-06-16 00:00 | CVE-2026-28318 | bishopfox.com | Original ↗ | .md | #active-exploitation | #rce | #vulnerability-research

4.

CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways

vulnerability | 2026-03-10 00:00 | CVE-2025-26399 | netspi.com | Original ↗ | .md | #rce | #deserialization | #patching

5.

Trick or treat: 5 spooky phishing stories

blog | 2025-10-30 12:00 | bugcrowd.com | Original ↗ | .md | #supply-chain | #phishing | #bugcrowd

6.

Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

vulnerability | 2025-04-11 00:00 | CVE-2026-28326 | bishopfox.com | Original ↗ | .md | #rce | #deserialization | #detection

7.

CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk

vulnerability | 2025-03-10 00:00 | CVE-2024-28989 | netspi.com | Original ↗ | .md | #encryption | #solarwinds | #aes-gcm

8.

Partial SolarWinds reprieve, CrowdStrike lessons, LLM kryptonite – OffSec roundup for CISOs

blog | 2024-10-16 15:00 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain

9.

Takeaways from the Dismissal of Most of the Government’s Case Against the SolarWinds CISO

blog | 2024-08-15 21:50 | hackerone.com | Original ↗ | .md | #regulation | #solarwinds | #legal

10.

US SEC cyber rules, SolarWinds CISO charges: How a unified OffSec strategy can enhance your SEC disclosures

blog | 2024-02-08 09:14 | yeswehack.com | Original ↗ | .md | #compliance | #offsec | #regulation

11.

Fortifying Assets for SEC Compliance with HackerOne

blog | 2023-11-16 17:08 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability-management | #compliance

12.

Advisory: Solarwinds Web Help Desk Arbitrary HQL Evaluation (CVE-2021-35232)

vulnerability | 2022-01-23 00:00 | CVE-2021-35232 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

13.

EMA Report: Unknown Vulnerabilities Emerge as Top Active Directory Security Concern

blog | 2022-01-26 00:25 | semperis.com | Original ↗ | .md | #vulnerability-management | #active-directory | #solarwinds

14.

Solarwinds Web Help Desk: When the Helpdesk is too Helpful

research | 2022-01-23 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

15.

Creating an Exploit: SolarWinds Vulnerability CVE-2021-35211

vulnerability | 2022-01-13 00:00 | CVE-2021-35211 | bishopfox.com | Original ↗ | .md | #vulnerability | #solarwinds | #rop

16.

Securing the Supply Chain by Working With Ethical Hackers

blog | 2021-11-30 17:50 | hackerone.com | Original ↗ | .md | #bug-bounty | #supply-chain | #open-source

17.

The Importance of Reviewing Source Code for Security Vulnerabilities: Two Years After the SolarWinds Breach

blog | 2021-10-05 00:00 | netspi.com | Original ↗ | .md | #backdoor | #sdlc | #solarwinds

18.

Q&A: Doug Brush Talks Incident Response, DJI Drones, and Mental Health in Cybersecurity

blog | 2021-08-31 00:00 | netspi.com | Original ↗ | .md | #incident-response | #ciso | #solarwinds

19.

Now’s the Time to Rethink Active Directory Security

blog | 2021-08-04 16:13 | semperis.com | Original ↗ | .md | #active-directory | #identity-security | #security-strategy

20.

Time to Leave ADFS Behind for Authenticating in Hybrid Environments?

blog | 2021-07-08 19:28 | semperis.com | Original ↗ | .md | #cloud | #active-directory | #authentication

21.

New Insights on Supply Chain and Ransomware Attacks From Our Chat With Alex Stamos and Charles Carmakal

incident | 2021-06-10 00:00 | bishopfox.com | Original ↗ | .md | #supply-chain | #incident-response | #threat-intelligence

22.

MICROSOFT SAYS: RUSSIAN SOLARWINDS HACKERS HIT U.S. GOVERNMENT AGENCIES AGAIN

blog | 2021-06-02 15:44 | hackerone.com | Original ↗ | .md | #supply-chain | #phishing | #apt

23.

Identity Attack Watch: May 2021

blog | 2021-05-28 15:53 | semperis.com | Original ↗ | .md | #active-directory | #solarwinds | #news-roundup

24.

Identity Attack Watch: March 2021

blog | 2021-03-26 18:58 | semperis.com | Original ↗ | .md | #active-directory | #ransomware | #solarwinds

25.

The Rise of Misconfiguration and Supply Chain Vulnerabilities

vulnerability | 2021-02-26 04:51 | hackerone.com | Original ↗ | .md | #supply-chain | #cloud-security | #solarwinds

26.

Semperis Identity Attack Watch: February 2021

blog | 2021-02-26 18:28 | semperis.com | Original ↗ | .md | #active-directory | #ransomware | #solarwinds

27.

The Need to Prevent Insider Threats, as Revealed by the SolarWinds Cyber Security Breach

blog | 2021-02-09 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #insider-threat | #ciso

28.

Semperis Expert: SolarWinds Attack Highlights Need to Secure AD

incident | 2021-02-02 16:02 | semperis.com | Original ↗ | .md | #cloud | #supply-chain | #active-directory

29.

5 Learnings From A Conversation With OP Financial Group's CISO And @mrtuxracer

blog | 2021-01-27 18:59 | hackerone.com | Original ↗ | .md | #phishing | #webinar | #ciso

30.

FireEye, SolarWinds, U.S. Treasury: What’s Happening in the Cyber Security World Right Now?

incident | 2020-12-15 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #apt | #supply-chain-attack