Critical

Recent SolarWinds Flaws Potentially Exploited as Zero-Days

SecurityWeek

February 9, 2026 at 12:42 PM

Actively Exploited

Overview

In December 2025, vulnerabilities in SolarWinds Web Help Desk instances were exploited, allowing attackers to gain initial access to compromised systems. This incident raises concerns for organizations using SolarWinds products, as it indicates that these flaws may have been leveraged as zero-day exploits. Such vulnerabilities can lead to unauthorized access and potential data breaches, making it crucial for affected companies to address these security gaps promptly. Users should be vigilant and monitor their systems for unusual activity while applying any available patches or updates. The incident serves as a reminder of the ongoing risks associated with third-party software vulnerabilities.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: SolarWinds Web Help Desk instances
Action Required: Organizations should apply any available patches or updates from SolarWinds and monitor their systems for unauthorized access.
Timeline: Disclosed on December 2025

Original Article Summary

Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access. The post Recent SolarWinds Flaws Potentially Exploited as Zero-Days appeared first on SecurityWeek.

Impact

SolarWinds Web Help Desk instances

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Disclosed on December 2025

Remediation

Organizations should apply any available patches or updates from SolarWinds and monitor their systems for unauthorized access.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Zero-day, Vulnerability, SolarWinds.

Read Original Article

Related Coverage

2 charged in New York for laundering $43 million from investment scams

SCM feed for Latest

Zhuoying Chen, 27, and Haojie Zhang, 38, have been charged in New York for allegedly laundering $43 million that was obtained through various investment scams. The two men are accused of operating a network that funneled this significant sum of money to China, raising concerns about the scale and sophistication of financial fraud schemes. The case illustrates how cybercriminals are increasingly using complex methods to hide illicit funds, which can undermine legitimate financial systems. Authorities are focusing on these activities to combat financial crimes and protect potential victims from similar scams. The investigation underscores the ongoing challenges law enforcement faces in tracking and prosecuting financial fraud linked to cyber activities.

Jul 17, 2026

New Russian-speaking threat actor UAT-11795 targets US and Europe with novel malware

SCM feed for Latest

A new Russian-speaking hacking group known as UAT-11795 is targeting organizations in the United States and Europe. This group is using innovative malware tools, specifically the Starland Remote Access Trojan (RAT) built with Python and the PowerShell-based WLDR agent, which operates solely in memory. These tools are designed to evade detection through encrypted communications and a unique execution environment. The emergence of UAT-11795 raises concerns for businesses and government entities, as their tactics could lead to significant data breaches or system compromises. As cyber threats continue to evolve, organizations need to be vigilant and enhance their security measures to defend against such sophisticated attacks.

Jul 17, 2026

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

The Hacker News

A serious vulnerability has been discovered in the WordPress core that allows unauthenticated attackers to execute code on affected sites. This flaw impacts any WordPress installation running versions 6.9 and 7.0, even those without any plugins installed. The issue was identified by Adam Kues from Assetnote, and WordPress has since addressed it with updates 6.9.5 and 7.0.2, which were released on Friday. These updates include a feature called forced updates to help secure sites against this vulnerability. It's crucial for WordPress users to ensure they are running the latest version to protect their sites from potential exploitation.

Jul 17, 2026

Filtering Known-Bad Messages Does Not Prove Detection Readiness

SCM feed for Latest

The article discusses the inadequacy of measuring cybersecurity effectiveness solely by block rates of known-bad messages. It argues that just because a system can block certain threats does not mean it is fully prepared to detect and respond to all potential attacks. This is a significant point for organizations relying on these metrics, as it may give a false sense of security. The piece emphasizes the need for a deeper understanding of detection capabilities rather than just focusing on how many threats are blocked. By doing so, organizations can better assess their true security posture and improve their defenses against evolving threats.

Jul 17, 2026

Abbott Laboratories probes two cyber incidents amid extortion claims

BleepingComputer

Abbott Laboratories is currently investigating two cybersecurity incidents that have raised concerns about the security of its internal systems. The first incident involves unauthorized access to legacy Exact Sciences systems within its Cancer Diagnostics division. The second incident pertains to claims that attackers breached its LabCentral portal and may have stolen sensitive company data. These incidents could potentially impact patient diagnostics and data integrity, making it crucial for Abbott to address these security breaches promptly. The company has not yet disclosed the extent of the breaches or the specific data that may have been compromised, which adds to the urgency of their investigation.

Jul 17, 2026

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

The Hacker News

A recently discovered vulnerability in OpenSSL, dubbed the HollowByte flaw, can cause unpatched servers to reserve up to 131 KB of memory for a tiny 11-byte TLS request that never arrives. This issue can lead to a denial-of-service condition, where the server's memory is tied up until the process is restarted. The problem was identified by Okta's Red Team, which reported it without a CVE or formal advisory. OpenSSL issued a fix for this vulnerability in June, but the lack of documentation means many users may remain unaware of the risk. As a result, organizations running affected OpenSSL versions should ensure they apply the update to avoid potential service disruptions.

Jul 17, 2026