SolarWind’s Data Breach – Update
Some of the information stolen from the various companies after the hack into Solarwinds is now up for sale.
What’s on the shelf:
- Microsoft Information (Partial Source Code) for $ 600k
- Cisco Information (source code for some products) for $ 500k
- SolarWinds information (source code of the entire product) for $ 200k.
- FireEye Information (Red Team Assault Tool) for $ 50k.
Oh, and there is a sale … a package of all the above information for a million dollars.
WIIFM (What’s in it for me)
Beware: the next wave of ransomware and malware will not be recognized by antivirus which means that if you install it, the hackers will have 6 to 9 months of data
WSID2P (What should I do to protect)
Be aware. They are coming for you, and they’ll use any trick in the book for it.
Get informed and Start to protect your company now.
( Source: http://solarleaks.net/)
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
⚡ Free Vulnerability Prioritization Tools That Save CISOs Time ⚡
Thousands of vulnerabilities hit every year – but not all deserve your team’s immediate attention. The real challenge for CISOs is knowing which ones matter most, right now. Here are free tools that help cut through the noise and focus on what’s critical:
1️⃣ EPSS (Exploit Prediction Scoring System) – Prioritizes based on likelihood of exploitation in the wild.
🔗 https://www.first.org/epss/
2️⃣ CISA KEV Catalog – Free authoritative list of vulnerabilities actively exploited by adversaries.
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog
3️⃣ Vulners.com – Aggregates threat intelligence, exploits, and vulnerability data with prioritization insights.
🔗 https://vulners.com
4️⃣ Qualys TruRisk Free Tier – Helps identify and prioritize vulnerabilities by risk scoring.
🔗 https://www.qualys.com/trurisk/
5️⃣ OpenVAS (via Greenbone) – Vulnerability scanner with reporting that supports prioritization workflows.
🔗 https://www.greenbone.net
6️⃣ Kenna EPSS Explorer (Free) – Combines CVEs with EPSS data for prioritization dashboards.
🔗 https://risk.io/labs
7️⃣ VulnCheck Free Portal – Provides exploit intelligence to identify which CVEs are weaponized.
🔗 https://vulncheck.com
💡 Takeaway: Patch everything is not a strategy. These free tools let CISOs patch smart, focusing resources on the vulnerabilities most likely to be used in attacks.
At AUMINT.io, we help CISOs go further – by simulating how attackers actually exploit overlooked human and technical gaps, then providing data-driven insights to prioritize awareness and defenses.
🔗 Curious how your org would rank if attackers targeted your employees first? Book a free demo
#VulnerabilityManagement #CISO #CyberSecurity #ThreatPrioritization #AUMINT