Kaseya was warned of vulnerability in April

Researchers warned Kaseya April 6 about one of the vulnerabilities that REvil ended up exploiting nearly three months later in a crippling ransomware attack.
The Dutch Institute for Vulnerability Disclosure (DIVD) said that researcher Wietse Boonstrain in April discovered seven vulnerabilities in Kaseya’s VSA remote monitoring and management product and notified the New York- and Miami-based IT service management vendor about the flaws less than a week later. Eighty-seven days later, REvil took advantage of a flaw flagged by DIVDthat still wasn’t resolved.
“Last weekend, we found ourselves in the middle of a storm,” DIVDresearcher Frank Breedijk wrote Wednesday. “A storm created by the ransomware attacks executed via Kaseya VSA using a vulnerability which we confidentially disclosed to Kaseya. … Unfortunately, the worst-case scenario came true.”

Related Keywords

Miami , Florida , United States , Netherlands , Dutch , Divdresearcher Frank Breedijk , Victor Gevers , Wietse Boonstrain , Dutch Institute For Vulnerability Disclosure , Twitter , Kaseya April , Dutch Institute , Vulnerability Disclosure , Frank Breedijk , Twitter Saturday , மியாமி , புளோரிடா , ஒன்றுபட்டது மாநிலங்களில் , நெதர்லாந்து , டச்சு , வெற்றியாளர் கேவேர்ச் , ட்விட்டர் , டச்சு நிறுவனம் , ட்விட்டர் சனிக்கிழமை ,