Bulletin: Breach Tied To SolarWinds Holdings Inc.'s Software Update

SAN FRANCISCO (S&P Global Ratings) Dec. 14, 2020--SolarWinds Holdings Inc. filed an 8-K report today in which it said it was made aware of a cyberattack that inserted a vulnerability into its Orion monitoring products, which could allow an attacker to compromise the server on which Orion products run. SolarWinds said the vulnerability was inserted in updates released between March and June 2020. Orion products represent 45% of its total revenues. Of the more than 300,000 SolarWinds customers, 33,000 are active maintenance customers of Orion. The company estimates fewer than 18,000 customers installed the version of Orion that contains the vulnerability. SolarWinds made a hotfix available on its website to address the vulnerability. SolarWinds is also preparing a second hotfix

...December 14, 2020 SAN FRANCISCO (S&P Global Ratings) Dec. 14, 2020--SolarWinds Holdings Inc. filed an 8-K report today in which it said it was made aware of a cyberattack that inserted a vulnerability into its Orion monitoring products, which could allow an attacker to compromise the server on which Orion products run. SolarWinds said the vulnerability was inserted in updates released between March and June 2020. Orion products represent 45% of its total revenues. Of the more than 300,000 SolarWinds customers, 33,000 are active maintenance customers of Orion. The company estimates fewer than 18,000 customers installed the version of Orion that contains the vulnerability. SolarWinds made a hotfix available on its website to address the vulnerability. SolarWinds is also preparing a second hotfix update by Dec. 15. While there are certainly alternatives to SolarWinds' solution, we expect customers will use the patch and continue using the SolarWinds product. At this point, it is too early...

Bulletin