![]() In other words, while successful zero-day exploitation on Kaseya VSA software by itself isn't a supply-chain attack, taking advantage of the exploit to compromise managed service providers (MSPs) and breach their customers would constitute as one. ![]() There is no evidence that Kaseya's VSA codebase has been maliciously modified." "This allowed the attackers to leverage the standard VSA product functionality to deploy ransomware to endpoints. ![]() "The attackers were able to exploit zero-day vulnerabilities in the VSA product to bypass authentication and run arbitrary command execution," the Miami-headquartered company noted in the incident analysis.
0 Comments
Leave a Reply. |