kaseya
Safeguard articles tagged "kaseya" — guides, analysis, and best practices for software supply chain and application security.
6 articles
CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
CVE-2021-30116 affects Kaseya Virtual System/Server Administrator (VSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2018-20753: Kaseya VSA Remote Code Execution Vulnerability
CVE-2018-20753 affects Kaseya Virtual System/Server Administrator (VSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-04-13.
CVE-2017-18362: Kaseya VSA SQL Injection Vulnerability
CVE-2017-18362 affects Kaseya Virtual System/Server Administrator (VSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-05-24.
Kaseya VSA (2021): A Supply Chain Ransomware Attack via MSP Tooling
A factual look at the July 2021 Kaseya VSA supply chain attack, in which REvil affiliates exploited a zero-day to deploy ransomware through managed service provider software to downstream customers.
Kaseya VSA Ransomware: A Supply Chain Analysis
REvil chained three zero-days in Kaseya VSA to push ransomware through 1,500 MSP customers on July 2, 2021. Here is the technical anatomy.
Kaseya VSA Ransomware: Supply Chain Attack Hits 1,500 Businesses
REvil exploited Kaseya's VSA platform to push ransomware to managed service providers and their customers. Up to 1,500 businesses were hit in a single weekend.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.