THREAT INTEL: Ongoing Critical Security Lapses: CrowdStrike, Microsoft & SolarWinds Exposed Insecure Servers

Similarly, Microsoft, a cornerstone of enterprise and personal computing, has been found with the same, identical vulnerabilities. This is particularly egregious considering their prominent role and claims in providing secure and reliable software solutions.

These INSECURE subdomains and servers are an open invitation to cybercriminals, jeopardizing the data of millions of users globally. No security measures can or will compensate for these failings.

SolarWinds, already infamous for the devastating Sunburst malware attack, that exploited NOT SECURE subdomains and INSECURE DNS servers, shows no signs of having learned from past mistakes. The company’s ongoing neglect of basic security measures is indefensible, especially given the critical nature of the services they also provide.

Despite the multiple times we shared information and the provision of concrete evidence, these companies continue to ignore these critical exposed issues, prioritizing Profits and PR over genuine security concerns or their clients security.

Their inaction not only puts every one of their clients at risk, but also undermines public trust in their ability to safeguard critical infrastructure.

Thankfully, agencies like the Federal Bureau of Investigation (FBI) and Federal Aviation Administration were grateful and took our information and intelligence seriously and actioned them, underscoring the gravity of the situation.

It’s high time these tech behemoths ‘own’ their security failings and take immediate action to rectify these vulnerabilities before the next catastrophic breach occurs.

Cybersec Innovation Partners
GCHQ
National Cyber Security Centre
FBI Cyber Division
Central Intelligence Agency
U.S. Department of Homeland Security
United States Department of Defense
ABC News
CNN
CNBC
Fox News Media
BBC News
InternetSecurity
DNS PKI