SolarWinds

SolarWinds Web Help Desk RCE: The Name That Hurts Again

Post author:Prabhu Kalyan Samal
Post published: September 3, 2026
Post category:Cloud & Infrastructure Security Web & API Security

On August 21-22, 2024, SolarWinds shipped 12.8.3 HF1 for Web Help Desk and disclosed CVE-2024-28986 — an unauthenticated Java deserialization flaw rated CVSS 9.8 that delivers pre-auth remote code execution on internet-facing instances. Within days PoC code circulated in exploitation attempts, and on August 26 CISA added it to the Known Exploited Vulnerabilities catalog, making patching mandatory across federal networks. This account covers the bug mechanics, the four-day disclosure-to-KEV sprint, and the uncomfortable optics of a SolarWinds product back in emergency-cycle headlines.

SolarWinds SUNBURST: Inside the Supply-Chain Attack That Rewrote Security

Post author:Prabhu Kalyan Samal
Post published: September 3, 2026
Post category:Emerging Tech & Architecture Security Supply Chain Security

The full incident file on the SolarWinds SUNBURST supply-chain attack: how SVR-linked actors compromised the Orion build pipeline, trojanized signed updates reaching 18,000 customers, hand-picked under 100 targets including nine US federal agencies, and forged SAML tokens to persist. Includes the technical anatomy, timeline, impact numbers, and the build-pipeline hardening lessons that still define defender programs in 2026.

2020–2021: SolarWinds, Colonial Pipeline & the Ransomware Wave

Post author:Prabhu Kalyan Samal
Post published: August 30, 2026
Post category:Security

The era attackers learned to poison the supply chain itself: a backdoor inside the software updates of 18,000 organizations, and ransomware crews bold enough to shut down a country’s fuel pipeline and its meat supply.