Why network forensics? Identify TTPs (Tactics, Techniques, Procedures) Occam’s Razor doesn’t always apply: Confuse the investigator (adv. Attacker’s deliberate false evidence OR unsophisticated ...
SolarWinds has released security updates to patch four critical Serv-U remote code execution vulnerabilities that could grant attackers root access to unpatched servers. Serv-U is the company's ...
SolarWinds patched four critical Serv-U flaws ated 9.1/10 Bugs allowed arbitrary code execution; no exploitation observed so far Managed file transfer tools remain high-value targets SolarWinds Serv-U ...
Hackers exploit SolarWinds Web Help Desk flaws CVE-2025-40551 and CVE-2025-26399 Attackers deploy Zoho ManageEngine, Cloudflare tunnels, Velociraptor for persistence and control Campaign ongoing since ...
SolarWinds Web Help Desk (WHD) is under attack, with recent incidents exploiting a chain of zero-day and patched vulnerabilities dating back to late 2025, an analysis of customer reports by security ...
Researchers at Huntress Security have published data on the exploitation of a critical SolarWinds Web Help Desk (WHD) vulnerability, revealing how in at least three known incidents, attackers ...
Threat actors are pouncing on new vulnerabilities in SolarWinds Web Help Desk (WHD), further illustrating the risks of applications exposed to the public Internet. SolarWinds WHD is an IT support and ...
Microsoft observed active exploitation of internet-exposed SolarWinds Web Help Desk vulnerabilities enabling lateral movement. Attackers abused legitimate tools, PowerShell, and RMM software to ...
The four security defects could be exploited for remote code execution but require administrative privileges. All four security defects, tracked as CVE-2025-40538 to CVE-2025-40541, have a CVSS score ...
Digital intruders exploited buggy SolarWinds Web Help Desk (WHD) instances in December to break into victims' IT environments, move laterally, and steal high-privilege credentials, according to ...
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access. Attacks targeting internet-accessible SolarWinds Web Help Desk (WHD) instances for initial access may ...
SolarWinds has released updates to address four critical security flaws in its Serv-U file transfer software that, if successfully exploited, could result in remote code execution. The vulnerabilities ...