A recent announcement by the SEC reveals SolarWinds Corporation and its CISO are facing charges for fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities related to a 2020 cyberattack.
The Securities and Exchange Commission (SEC), allege that Austin, Texas-based software company SolarWinds Corporation and its Chief Information Security Officer (CISO), Timothy G. Brown, didn’t disclose known vulnerabilities which led to the historic attack, and repeatedly violated antifraud disclosure and internal control provisions.