Security researchers warn of active attacks on SolarWinds Web Help Desk. Malicious actors are exploiting vulnerabilities to infiltrate systems and then deploy forensic tools as command-and-control ...
The Microsoft Defender Research Team observed a multi‑stage intrusion where threat actors exploited internet‑exposed SolarWinds Web Help Desk (WHD) instances to get an initial foothold and then ...
Microsoft observed active exploitation of internet-exposed SolarWinds Web Help Desk vulnerabilities enabling lateral movement. Attackers abused legitimate tools, PowerShell, and RMM software to ...
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access. Attacks targeting internet-accessible SolarWinds Web Help Desk (WHD) instances for initial access may ...
Microsoft has revealed that it observed a multi‑stage intrusion that involved the threat actors exploiting internet‑exposed SolarWinds Web Help Desk (WHD) instances to obtain initial access and move ...
Active exploitation of newly disclosed SolarWinds Web Help Desk vulnerabilities is underway, with attackers rapidly weaponizing internet-exposed instances for remote code execution and follow-on ...