SolarWinds

The US securities regulator has dropped its two-year lawsuit against SolarWinds and CISO Timothy G. Brown, which accused the company of misleading investors about internal cybersecurity risks. The case related to the wide-ranging 2019 SolarWinds attack in which malicious code was injected into the build process. SolarWinds welcomed the decision, saying the proceedings had deterred security leaders; the highly publicized case now comes to an end. » More on heise.de

The U.S. Securities and Exchange Commission has dismissed with prejudice its lawsuit against SolarWinds and CISO Timothy Brown tied to the 2020 Sunburst cyberattack. The parties filed a joint stipulation to dismiss after earlier court scrutiny and a pause in proceedings; SolarWinds said the outcome should ease CISOs' concerns about potential chilling effects on security work. » More on yahoo.com

Tim Brown, chief information security officer at SolarWinds, describes the December 2020 Orion supply-chain hack that gave attackers access to US agencies and thousands of customers and triggered an emergency company response. SolarWinds halted new features, focused engineers on security, engaged external firms and saw customer renewals drop before recovering; the company later settled a class action for $26m. The SEC sued SolarWinds and Brown in 2023 over alleged misleading cybersecurity claims; a confidential proposed settlement was announced in July but awaits final approval. Brown remained at SolarWinds through the crisis and suffered a heart attack amid the prolonged stress, from which he has recovered. » More on theguardian.com