Hackers exploit SolarWinds WHD flaws to deploy DFIR tool in attacks

Published on February 9, 2026

Hackers are now exploiting SolarWinds Web Help Desk (WHD) vulnerabilities to gain code execution rights on exposed systems and deploy legitimate tools, including the Velociraptor forensics tools, for persistence and remote control. [...]