#solarwinds — Public Fediverse posts

SolarWinds Unlocks Real-Time Performance Visibility for SAP HANA Cloud

New Data Performance Analyzer (DPA) support brings wait-based analytics and AI-assisted tuning to SAP HANA Cloud, helping DBAs…
#Germany #DE #Europe #EU #Europa #SAP #databaseadministrators #DPA #sap #SAPHANA #SolarWinds
https://www.europesays.com/germany/51728/

Contd. [en] Software Supply Chain or Software Politics

2/2

"Although no malicious functionality was identified, the case showed how #software #provenance and #governance relationships may create #strategic concerns that are not visible through traditional #technical #analysis." ...

"#AI systems such as #Mythos may transform how governments identify software vulnerabilities, but vulnerabilities are only part of the strategic picture. The lessons of #XZ, #SolarWinds, and easyjson suggest that some of the most consequential risks may not emerge from #vulnerable code, but from the software ecosystem through which code is governed, trusted, and delivered."

https://www.justsecurity.org/142183/hiding-geopolitics-software-supply-chains/

#supplychain #vulnerability #go #easyjson #vk #invasion #ukraine #russia

Contd. [en] Software Supply Chain or Software Politics

2/2

"Although no malicious functionality was identified, the case showed how #software #provenance and #governance relationships may create #strategic concerns that are not visible through traditional #technical #analysis." ...

"#AI systems such as #Mythos may transform how governments identify software vulnerabilities, but vulnerabilities are only part of the strategic picture. The lessons of #XZ, #SolarWinds, and easyjson suggest that some of the most consequential risks may not emerge from #vulnerable code, but from the software ecosystem through which code is governed, trusted, and delivered."

https://www.justsecurity.org/142183/hiding-geopolitics-software-supply-chains/

#supplychain #vulnerability #go #easyjson #vk #invasion #ukraine #russia

[en] Software Supply Chain or Software Politics

1/2

"In 2025, a #software supply chain #vulnerability was discovered in the widely used #Go programming library #easyjson that drew scrutiny due to its association with engineers from the #Russian technology company #VK. The package was hosted on GitHub by a MailRu account, which is owned by VK, and the VK CEO was sanctioned in 2022 by the U.S. Treasury following the Russian #invasion of #Ukraine, due to being or having been a leader or official of the Government of #Russia, amongst other reasons." ...

./2

#supplychain #ai #mythos #xz #solarwinds

[en] Software Supply Chain or Software Politics

1/2

"In 2025, a #software supply chain #vulnerability was discovered in the widely used #Go programming library #easyjson that drew scrutiny due to its association with engineers from the #Russian technology company #VK. The package was hosted on GitHub by a MailRu account, which is owned by VK, and the VK CEO was sanctioned in 2022 by the U.S. Treasury following the Russian #invasion of #Ukraine, due to being or having been a leader or official of the Government of #Russia, amongst other reasons." ...

./2

#supplychain #ai #mythos #xz #solarwinds

[en] Software Supply Chain or Software Politics

1/2

"In 2025, a #software supply chain #vulnerability was discovered in the widely used #Go programming library #easyjson that drew scrutiny due to its association with engineers from the #Russian technology company #VK. The package was hosted on GitHub by a MailRu account, which is owned by VK, and the VK CEO was sanctioned in 2022 by the U.S. Treasury following the Russian #invasion of #Ukraine, due to being or having been a leader or official of the Government of #Russia, amongst other reasons." ...

./2

#supplychain #ai #mythos #xz #solarwinds

[en] Software Supply Chain or Software Politics

1/2

"In 2025, a #software supply chain #vulnerability was discovered in the widely used #Go programming library #easyjson that drew scrutiny due to its association with engineers from the #Russian technology company #VK. The package was hosted on GitHub by a MailRu account, which is owned by VK, and the VK CEO was sanctioned in 2022 by the U.S. Treasury following the Russian #invasion of #Ukraine, due to being or having been a leader or official of the Government of #Russia, amongst other reasons." ...

./2

#supplychain #ai #mythos #xz #solarwinds

[en] Software Supply Chain or Software Politics

1/2

"In 2025, a #software supply chain #vulnerability was discovered in the widely used #Go programming library #easyjson that drew scrutiny due to its association with engineers from the #Russian technology company #VK. The package was hosted on GitHub by a MailRu account, which is owned by VK, and the VK CEO was sanctioned in 2022 by the U.S. Treasury following the Russian #invasion of #Ukraine, due to being or having been a leader or official of the Government of #Russia, amongst other reasons." ...

./2

#supplychain #ai #mythos #xz #solarwinds

“Wie alt bin ich", #kritis Edition

Weißt du, wo du warst bei
- #Heartbleed
- #log4j
- #gsmr Ausfall 1
- #gsmr Ausfall 2
- #WannaCry
- #solarWinds
- #NotPetya
?

Zähle deine “Ja”-Antworten und du erfährst dein biologisches Alter:

(0-1) frische 16
(2-4) junge 25
(4-6) bedenkliche 42
(7) oh oh..

“Wie alt bin ich", #kritis Edition

Weißt du, wo du warst bei
- #Heartbleed
- #log4j
- #gsmr Ausfall 1
- #gsmr Ausfall 2
- #WannaCry
- #solarWinds
- #NotPetya
?

Zähle deine “Ja”-Antworten und du erfährst dein biologisches Alter:

(0-1) frische 16
(2-4) junge 25
(4-6) bedenkliche 42
(7) oh oh..

“Wie alt bin ich", #kritis Edition

Weißt du, wo du warst bei
- #Heartbleed
- #log4j
- #gsmr Ausfall 1
- #gsmr Ausfall 2
- #WannaCry
- #solarWinds
- #NotPetya
?

Zähle deine “Ja”-Antworten und du erfährst dein biologisches Alter:

(0-1) frische 16
(2-4) junge 25
(4-6) bedenkliche 42
(7) oh oh..

“Wie alt bin ich", #kritis Edition

Weißt du, wo du warst bei
- #Heartbleed
- #log4j
- #gsmr Ausfall 1
- #gsmr Ausfall 2
- #WannaCry
- #solarWinds
- #NotPetya
?

Zähle deine “Ja”-Antworten und du erfährst dein biologisches Alter:

(0-1) frische 16
(2-4) junge 25
(4-6) bedenkliche 42
(7) oh oh..

📰 CISA Mandates Patch for Actively Exploited SolarWinds DoS Flaw Added to KEV Catalog

📢 CISA KEV ALERT! An actively exploited DoS flaw (CVE-2026-28318) in SolarWinds Serv-U is on the loose. Federal agencies must patch by June 19. All orgs using Serv-U are urged to update immediately! 🚨 #CVE #SolarWinds #Infosec #PatchNow

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/cisa-orders-patch-for-actively-exploited-solarwinds-serv-u-dos-vulnerability/?utm_…

📰 CISA Mandates Patch for Actively Exploited SolarWinds DoS Flaw Added to KEV Catalog

📢 CISA KEV ALERT! An actively exploited DoS flaw (CVE-2026-28318) in SolarWinds Serv-U is on the loose. Federal agencies must patch by June 19. All orgs using Serv-U are urged to update immediately! 🚨 #CVE #SolarWinds #Infosec #PatchNow

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/cisa-orders-patch-for-actively-exploited-solarwinds-serv-u-dos-vulnerability/?utm_…

SolarWinds tenta travar ataques contra servidores vulneráveis após alerta da CISA
🔗 https://tugatech.com.pt/t85090-solarwinds-tenta-travar-ataques-contra-servidores-vulneraveis-apos-alerta-da-cisa

#alerta #solarwinds 

SolarWinds tenta travar ataques contra servidores vulneráveis após alerta da CISA
🔗 https://tugatech.com.pt/t85090-solarwinds-tenta-travar-ataques-contra-servidores-vulneraveis-apos-alerta-da-cisa

#alerta #solarwinds 

Hackers now exploit #SolarWinds #ServU flaw to crash servers

https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-solarwinds-serv-u-flaw-to-crash-servers/

#cybersecurity

Hackers now exploit #SolarWinds #ServU flaw to crash servers

https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-solarwinds-serv-u-flaw-to-crash-servers/

#cybersecurity

CISA Flags SolarWinds Serv-U Flaw as Actively Exploited

A critical flaw in SolarWinds Serv-U is being actively exploited, allowing attackers to crash the service with a specially crafted POST request - no authentication required. This denial-of-service vulnerability, tracked as CVE-2026-28318, can be triggered by a simple HTTP POST request with a malicious Content-Encoding header.

https://osintsights.com/cisa-flags-solarwinds-serv-u-flaw-as-actively-exploited?utm_source=mastodon&utm_medium=social

#Solarwinds #Servu #Cve202628318 #DenialOfService #Contentencoding

Hackers Actively Exploit SolarWinds Serv-U Flaw to Crash Servers

SolarWinds has issued an emergency hotfix to address a critical flaw in its Serv-U file transfer product, which hackers are actively exploiting to crash servers with specially crafted POST requests. A denial-of-service vulnerability, tracked as CVE-2026-28318, can be triggered without authentication, posing a significant threat to…

https://osintsights.com/hackers-actively-exploit-solarwinds-serv-u-flaw-to-crash-servers?utm_source=mastodon&utm_medium=social

#Cve202628318 #Solarwinds #Servu #DenialOfService #ManagedFileTransfer

Gizmodo: The SolarWinds Hack Was More Humiliating for the Government Than We Thought. “The SolarWinds attack in 2020 was a humiliating all-out assault on U.S. government cybersecurity, and it’s likely that one key reason it’s not more famous is that we still know very little about what the hackers achieved. But we now have a few more crumbs to work with, because new revelations from […]

Gizmodo: The SolarWinds Hack Was More Humiliating for the Government Than We Thought. “The SolarWinds attack in 2020 was a humiliating all-out assault on U.S. government cybersecurity, and it’s likely that one key reason it’s not more famous is that we still know very little about what the hackers achieved. But we now have a few more crumbs to work with, because new revelations from […]

WARNING: A gigantic coronal hole is darkening Uranus! Scientists investigating Uranus have also discovered that it is full of rocks - not just ice. www.livescience.com/space/the-su... #astronomy #nasa #space #earth #sun #solar #moon #science #uranus #sciencesky #solarwinds

Gigantic 'hole' in the sun wid...

Two giant holes opened up on Sun potentially sending million mph winds to Earth | indy100 www.indy100.com/science-tech... #Solar #SolarHoles #SolarWinds #Sun

Two giant holes opened up on S...

Two giant holes opened up on Sun potentially sending million mph winds to Earth | indy100
https://www.indy100.com/science-tech/sun-hole-solar-winds-earth-2659713729

#Solar
#SolarHoles
#SolarWinds
#Sun

Two giant holes opened up on Sun potentially sending million mph winds to Earth | indy100
https://www.indy100.com/science-tech/sun-hole-solar-winds-earth-2659713729

#Solar
#SolarHoles
#SolarWinds
#Sun

Nachdem es in den letzten Jahren Angriffe auf #Solarwinds oder #Kaseya gab, steht immer stärker auch die #Opensource Community im Fokus von #Cybercrime, indem durch die Kompromittierung einer Maintainer-Identität potenziell Millionen von Entwicklungsumgebungen und CI/CD-Pipelines ebenfalls kompromittiert werden.

So haben haben Angreifer die #JavaScript-Bibliothek #Axios, eine der meistgenutzten Komponenten moderner Webentwicklung, zeitweise mit #Schadsoftware bestückt:

https://www.it-daily.net/shortnews/npm-bibliothek-axios-zeitweise-mit-malware-verseucht

Nachdem es in den letzten Jahren Angriffe auf #Solarwinds oder #Kaseya gab, steht immer stärker auch die #Opensource Community im Fokus von #Cybercrime, indem durch die Kompromittierung einer Maintainer-Identität potenziell Millionen von Entwicklungsumgebungen und CI/CD-Pipelines ebenfalls kompromittiert werden.

So haben haben Angreifer die #JavaScript-Bibliothek #Axios, eine der meistgenutzten Komponenten moderner Webentwicklung, zeitweise mit #Schadsoftware bestückt:

https://www.it-daily.net/shortnews/npm-bibliothek-axios-zeitweise-mit-malware-verseucht

Nachdem es in den letzten Jahren Angriffe auf #Solarwinds oder #Kaseya gab, steht immer stärker auch die #Opensource Community im Fokus von #Cybercrime, indem durch die Kompromittierung einer Maintainer-Identität potenziell Millionen von Entwicklungsumgebungen und CI/CD-Pipelines ebenfalls kompromittiert werden.

So haben haben Angreifer die #JavaScript-Bibliothek #Axios, eine der meistgenutzten Komponenten moderner Webentwicklung, zeitweise mit #Schadsoftware bestückt:

https://www.it-daily.net/shortnews/npm-bibliothek-axios-zeitweise-mit-malware-verseucht

Nachdem es in den letzten Jahren Angriffe auf #Solarwinds oder #Kaseya gab, steht immer stärker auch die #Opensource Community im Fokus von #Cybercrime, indem durch die Kompromittierung einer Maintainer-Identität potenziell Millionen von Entwicklungsumgebungen und CI/CD-Pipelines ebenfalls kompromittiert werden.

So haben haben Angreifer die #JavaScript-Bibliothek #Axios, eine der meistgenutzten Komponenten moderner Webentwicklung, zeitweise mit #Schadsoftware bestückt:

https://www.it-daily.net/shortnews/npm-bibliothek-axios-zeitweise-mit-malware-verseucht

Nachdem es in den letzten Jahren Angriffe auf #Solarwinds oder #Kaseya gab, steht immer stärker auch die #Opensource Community im Fokus von #Cybercrime, indem durch die Kompromittierung einer Maintainer-Identität potenziell Millionen von Entwicklungsumgebungen und CI/CD-Pipelines ebenfalls kompromittiert werden.

So haben haben Angreifer die #JavaScript-Bibliothek #Axios, eine der meistgenutzten Komponenten moderner Webentwicklung, zeitweise mit #Schadsoftware bestückt:

https://www.it-daily.net/shortnews/npm-bibliothek-axios-zeitweise-mit-malware-verseucht

On that note, #Windows10 should be forcefully open sourced so that the world can decide wether or not #Micorsoft still gets to screw with the NT kernel and userland - as they are want to do.

I keep telling people, it's not the flock - but the shepard. Let's not kid ourselves. #SolarWinds is still reeling in my head. "So you spat unverified code into ring 0? Omg".

The alternative is of course: switch everyone to #Linux, so that #Ableton will port Live and I can leave all this all behind.

On that note, #Windows10 should be forcefully open sourced so that the world can decide wether or not #Micorsoft still gets to screw with the NT kernel and userland - as they are want to do.

I keep telling people, it's not the flock - but the shepard. Let's not kid ourselves. #SolarWinds is still reeling in my head. "So you spat unverified code into ring 0? Omg".

The alternative is of course: switch everyone to #Linux, so that #Ableton will port Live and I can leave all this all behind.

The Solar Wind Supply Chain attack

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#SolarWinds #hackers #patching #supplyChain #Cybersecurity #cyberattacks #cyberThreats #onlineSecurity #negativepid

The Solar Wind Supply Chain attack

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#SolarWinds #hackers #patching #supplyChain #Cybersecurity #cyberattacks #cyberThreats #onlineSecurity #negativepid

CVE Alert: CVE-2025-26399 - SolarWinds - Web Help Desk - https://www.redpacketsecurity.com/cve-alert-cve-2025-26399-solarwinds-web-help-desk/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-26399 #solarwinds #web-help-desk

CVE Alert: CVE-2025-26399 - SolarWinds - Web Help Desk - https://www.redpacketsecurity.com/cve-alert-cve-2025-26399-solarwinds-web-help-desk/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-26399 #solarwinds #web-help-desk

The Solar Wind Supply Chain attack

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#SolarWinds #hackers #patching #supplyChain #Cybersecurity #cyberattacks #cyberThreats #onlineSecurity #negativepid

The Solar Wind Supply Chain attack

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#SolarWinds #hackers #patching #supplyChain #Cybersecurity #cyberattacks #cyberThreats #onlineSecurity #negativepid

latest SolarWinds CVEs.. all critical lmao.. patch patch patch!

CVE-2025-40538 - Improper Privilege Management
CVE-2025-40539 - Incorrect Type Conversion or Cast
CVE-2025-40540 - Incorrect Type Conversion or Cast
CVE-2025-40541 - Incorrect Type Conversion or Cast & Authorization Bypass Through User-Controlled Key

SolarWinds Serv-U 15.5.3 and prior versions

https://hecate.pw/vulnerabilities?search=vendors%3A%22SolarWinds%22+AND+published%3A%3E%3D2026-02-22&mode=dql

#vulnerability #security #solarwinds

Security Advisory Summary:
SolarWinds Serv-U 15.5.4 patches four critical vulnerabilities:
• CVE-2025-40538 – Broken access control → system admin creation + root RCE
• Two type confusion flaws → root code execution
• One IDOR vulnerability → elevated execution

Attack prerequisites:
High-privileged access required. Exploitation likely via credential compromise or chained privilege escalation.

Exposure landscape:
12K+ internet-facing instances observed (Shodan)
File transfer platforms remain ransomware-favored entry vectors

Historical context:
Prior Serv-U CVEs exploited by ransomware groups and state-aligned actors.

Immediate actions:
- Patch to 15.5.4
- Audit privileged accounts
- Review FTP/SFTP exposure
- Monitor for anomalous admin creation

Source: https://www.bleepingcomputer.com/news/security/critical-solarwinds-serv-u-flaws-offer-root-access-to-servers/

Follow us for tactical advisories and vulnerability intelligence.

Comment with your detection or hardening recommendations.

#Infosec #SolarWinds #ThreatIntel #CVE2025 #RCE #PrivilegeEscalation #BlueTeam #SecurityEngineering #AttackSurface #ZeroTrust

CVE Alert: CVE-2025-40541 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40541-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40541 #solarwinds #serv-u

CVE Alert: CVE-2025-40540 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40540-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40540 #solarwinds #serv-u

CVE Alert: CVE-2025-40540 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40540-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40540 #solarwinds #serv-u

CVE Alert: CVE-2025-40541 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40541-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40541 #solarwinds #serv-u

CVE Alert: CVE-2025-40539 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40539-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40539 #solarwinds #serv-u

CVE Alert: CVE-2025-40538 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40538-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40538 #solarwinds #serv-u

CVE Alert: CVE-2025-40538 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40538-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40538 #solarwinds #serv-u

CVE Alert: CVE-2025-40539 - SolarWinds - Serv-U - https://www.redpacketsecurity.com/cve-alert-cve-2025-40539-solarwinds-serv-u/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-40539 #solarwinds #serv-u

SolarWinds corrige falhas críticas no Serv-U que dão acesso total aos servidores
🔗 https://tugatech.com.pt/t78803-solarwinds-corrige-falhas-criticas-no-serv-u-que-dao-acesso-total-aos-servidores

#solarwinds