White hats reported key Kaseya VSA flaw months ago. Ransomware outran the patch

One of the vulnerabilities in Kaseya’s IT management software VSA that was exploited by miscreants to infect up to 1,500 businesses with ransomware was reported to the vendor in April – and the patch just wasn’t ready in time. As we’ve covered this week, deployments of Kaseya’s flagship Virtual System Administrator (VSA) product were hijacked at the start of the month to inject REvil extortionware into networks around the world.

Read full article on The Register

 


Date:

Categorie(s):