Data Security

The researchers found that openly available medical images – including up to 200 lines of metadata per record – could be accessed without the need for a user name or password.

SolarWinds customers – over 300,000 of them, including most of the Fortune 500 – must determine what was breached, mitigate the damage before using the software again, and explore new supply chain safeguards.

For many businesses, recovery from the pandemic fallout hinges in part on employees working safely and virus-free outside their homes. That leaves organizations facing the very real possibility that they will serve as both trackers and guardians of health data to ensure the safety of employees.

The vast majority of the malicious files detected – 89.8 percent – occurred via Windows PE files, a file format specific to Windows operating systems.

The vulnerability may have inadvertently exposed Spotify account registration information, which potentially included email addresses, preferred display names, passwords, genders and dates of birth.