> You don't get this kind of attack because you had an exposed FTP server. Leaking the extremely weak login credentials to your updateserver, trough a public G

> You don't get this kind of attack because you had an exposed FTP server. Leaking the extremely weak login credentials to your updateserver, trough a public Github repo, is not exactly a glowing endorsement of how serious security seems to have been taken at Solwarwinds. With stuff like that being a thing, who knows where else they cut corners/got lazy. > this makes SolarWinds a prime target, one that is worth the efforts taken in this case. A prime target, yet apparently could still not be bothered to put in some minimum effort to protect themselves.