TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8378
@thehackernews
The Hacker News
Post content
Post content
🚨 Microsoft traced a multi-stage intrusion to exposed SolarWinds Web Help Desk servers. Attackers used unauthenticated RCE, moved laterally, and abused legit RMM tools for persistence — plus credential dumping and DCSync. 🔗 Tradecraft, CVEs, and lateral movement chain → https://thehackernews.com/2026/02/solarwinds-web-help-desk-exploited-for.html