SolarWinds, PHP, and the Software Security Wake-Up Call
Learn how to uncover vulnerable software, strengthen IT asset security, and use proactive monitoring and remediation strategies to reduce risks before they become costly incidents. A live, interactive session for IT, security, and compliance teams, built on publicly documented incidents involving SolarWinds, PHP, and other widely used software.
- ✓ Find out which software, devices, and users an advisory affects
- ✓ Understand the PII, legal, and compliance side of a software incident
- ✓ Leave with the Software Risk Readiness Checklist
Save Your Seat
Free to attend · Live · Hosted by Monte Weaver, with guest Ayesha Haq
Can't attend live? Register and we'll email you the replay and the Software Risk Readiness Checklist.
Register for the Free Webinar →Trusted software is not automatically risk-free. Do you know where yours runs?
When a critical vulnerability is discovered in software your organization relies on, how quickly can your IT team identify what's affected and decide what to do next? Recent incidents involving SolarWinds, PHP, and other trusted technologies show how business-critical software can become a security concern.
In October 2026, two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell) were disclosed. They allow unauthenticated remote code execution. AI-assisted research helped find them, emergency patches shipped on October 21, and the NSA advised patching urgently. The earlier SolarWinds software supply chain compromise showed the same problem from another direction: a widely deployed, trusted product, and a scramble to work out who was running what. Third-party involvement in breaches doubled to 30% in the Verizon 2025 Data Breach Investigations Report.
The hard part is not knowing that a vulnerability exists. It is knowing which software is installed, which devices and users are affected, whether sensitive data (PII) could be exposed, who owns the response, and how fast you can patch, restrict, or replace the software. This session works through those questions with documented public examples. It is a conversation, not a product tour.
Live and interactive, and built for IT, Security, and Compliance teams. Examples come from publicly documented incidents.
Where exposure hides
What you'll walk away with
Five practical things you can act on the week after you attend.
What recent incidents reveal
What recent software security incidents show about trusted applications and vendors.
Find vulnerable software
How to identify vulnerable software, and the systems, devices, and users it affects.
Protect sensitive data
How to reduce risks involving sensitive data and personally identifiable information (PII).
Coordinate the response
How IT, security, and compliance teams work together on vulnerability response.
Stay proactive
How software visibility and connected IT workflows support proactive risk management.
Plus: audience Q&A
Bring your real-world questions. Attendees also get the replay and the Software Risk Readiness Checklist, a downloadable PDF.
Register free →What we'll talk about
Seven topics in a natural, interactive conversation of about 60 minutes, with your questions throughout.
IT Directors and IT Managers, IT Asset Managers, ITSM professionals, Security and Security Operations teams, and IT infrastructure and operations leaders.
Also Systems Administrators, software asset management professionals, CIOs and CISOs, risk, compliance, and governance teams, IT procurement and vendor management, and legal professionals who work on technology, privacy, and cybersecurity. Useful if you have limited visibility into your software environment, or no coordinated process for responding to vulnerabilities.
Who you'll learn from
An interactive conversation, not a product tour.
Monte Weaver
Monte spent two decades in enterprise IT, from help desk and systems administration to network engineering, firewall administration, and NOC leadership, before moving into ITIL consulting and technical communications. For the last nine years he has hosted technology webinars, livestreams, and podcasts, training thousands of IT professionals. He leads the session and takes your questions live.
Ayesha Haq
Ayesha joins the conversation on the legal, compliance, governance, and business side of software security vulnerabilities: organizational responsibility, vendor accountability, sensitive data protection, and managing legal or regulatory exposure.
Save your seat for November 19
A live, interactive conversation on finding vulnerable software, responding to it, and reducing risk before it becomes a costly incident. Free, with audience Q&A.
Register for the Free Webinar →