A US judge has dismissed most of a Securities and Exchange Commission (SEC) lawsuit against software company SolarWinds, accusing it of defrauding investors by concealing its security weaknesses before and after a Russia-linked cyberattack targeting the US government. The judge dismissed all claims against SolarWinds and its chief information security officer, Timothy Brown, over statements made after the attack, citing “hindsight and speculation.” The SEC had alleged that SolarWinds hid the porous cybersecurity of its products before the attack and downplayed the attack’s severity after it occurred. SolarWinds has welcomed the decision, calling the remaining claim against the company factually inaccurate.
Source and Details