5 ms·
"As the complaint alleges, SolarWinds’ public statements about its cybersecurity practices and risks were at odds with its internal assessments, including a 201
by blakesterz 3y ago
"As the complaint alleges, SolarWinds’ public statements about its cybersecurity practices and risks were at odds with its internal assessments, including a 2018 presentation prepared by a company engineer and shared internally, including with Brown, that SolarWinds’ remote access set-up was “not very secure” and that someone exploiting the vulnerability “can basically do whatever without us detecting it until it’s too late,” which could lead to “major reputation and financial loss” for SolarWinds. Similarly, as alleged in the SEC’s complaint, 2018 and 2019 presentations by Brown stated, respectively, that the “current state of security leaves us in a very vulnerable state for our critical assets” and that “[a]ccess and privilege to critical systems/data is inappropriate.”"
So I think if I'm reading that right, he knew things were “not very secure” and part of his role was to disclose that, and he didn't? I assume there's some rules in place that C level folks sign off on statements and he's the one to sign off on statements about security?
- deleted 3y ago[deleted]
- xwolfi 3y agoYou're not reading that right: the problem isnt that this engineer knew the problem, it s that he gave management presentations about it and they didnt fix it.
- cj 3y agoThe problem isn’t that they didn’t fix it. It’s that they knew about it and didn’t disclose it. When a company IPOs the SEC requires it to file a document that contains all known risks to the business and all possible factors that could negatively impact the company’s value over time. It sounds like they failed to include this specific known incident in their filings with the government.
- wglb 3y agoThis was likely Ian Thornton Trump: https://www.newsweek.com/ex-solarwinds-adviser-warned-company-security-issues-2017-incredibly-easy-target-hack-1556453 https://www.newsweek.com/ex-solarwinds-adviser-warned-compan...
- tru3_power 3y agoThese are often times problems that sadly take a long time to fix. Were they at least trying? Or just straight up didn’t care?
- pests 3y agoHe is not C-level.