{"id":1198526,"date":"2023-10-31T15:43:20","date_gmt":"2023-10-31T19:43:20","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1198526"},"modified":"2023-10-31T15:43:20","modified_gmt":"2023-10-31T19:43:20","slug":"sec-sues-solarwinds-and-ciso-says-they-ignored-flaws-that-led-to-major-hack","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1198526","title":{"rendered":"SEC sues SolarWinds and CISO, says they ignored flaws that led to major hack"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/10\/getty-lock-smashed-screen-800x614-1.jpg\" alt=\"Illustration of a padlock symbol on a smashed computer screen.\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/10\/getty-lock-smashed-screen.jpg\" class=\"enlarge-link\" data-height=\"1920\" data-width=\"2500\">Enlarge<\/a> (credit: Getty Images | Sean Gladwell)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>The US Securities and Exchange Commission sued SolarWinds Corp. and Chief Information Security Officer Timothy Brown yesterday, alleging that they concealed security failures that led to a nearly two-yearlong cyberattack known as &#8220;Sunburst.&#8221; The <a href=\"https:\/\/arstechnica.com\/information-technology\/2020\/12\/18000-organizations-downloaded-backdoor-planted-by-cozy-bear-hackers\/\">attack<\/a>, reportedly carried out by Russian hackers, inserted malicious code into SolarWinds network-management software used by thousands of customers, including <a href=\"https:\/\/www.reuters.com\/article\/us-global-cyber\/u-s-homeland-security-thousands-of-businesses-scramble-after-suspected-russian-hack-idUSKBN28O26X\">US government agencies<\/a> and private companies.<\/p>\n<p>From the time of its initial public offering in October 2018 until January 2021, SolarWinds and Brown &#8220;defrauded SolarWinds&#8217; investors and customers through misstatements, omissions, and schemes that concealed both the Company&#8217;s poor cybersecurity practices and its heightened\u2014and increasing\u2014cybersecurity risks,&#8221; the <a href=\"https:\/\/www.sec.gov\/files\/litigation\/complaints\/2023\/comp-pr2023-227.pdf\">SEC lawsuit<\/a> said. &#8220;SolarWinds&#8217; public statements about its cybersecurity practices and risks painted a starkly different picture from internal discussions and assessments about the Company&#8217;s cybersecurity policy violations, vulnerabilities, and cyberattack.&#8221;<\/p>\n<p>The SEC sued the company and Brown in US District Court for the Southern District of New York. The SEC is seeking disgorgement of &#8220;ill-gotten gains,&#8221; civil monetary penalties, and a permanent ban on Brown from acting as an officer or director for any company that issues securities.<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1980175#p3\">Read 11 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1980175&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1980175\" target=\"_blank\" rel=\"noopener\">SEC sues SolarWinds and CISO, says they ignored flaws that led to major hack<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge (credit: Getty Images | Sean Gladwell) The US Securities and Exchange Commission sued SolarWinds Corp. and Chief Information Security Officer Timothy Brown yesterday, alleging that they concealed security failures that led to a nearly two-yearlong cyberattack known as &#8220;Sunburst.&#8221; &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1198526\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1198527,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1198526","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1198526","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1198526"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1198526\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1198527"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1198526"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1198526"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1198526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}