id sid tid token lemma pos csirt-divd-nl-3484 1 1 DIVD-2021 divd-2021 JJ csirt-divd-nl-3484 1 2 - - HYPH csirt-divd-nl-3484 1 3 00011 00011 CD csirt-divd-nl-3484 1 4 - - HYPH csirt-divd-nl-3484 1 5 Kaseya Kaseya NNP csirt-divd-nl-3484 1 6 VSA VSA NNP csirt-divd-nl-3484 1 7 Limited Limited NNP csirt-divd-nl-3484 1 8 Disclosure Disclosure NNP csirt-divd-nl-3484 1 9 | | NNP csirt-divd-nl-3484 1 10 DIVD DIVD VBD csirt-divd-nl-3484 1 11 CSIRT CSIRT NNP csirt-divd-nl-3484 1 12 Skip Skip NNS csirt-divd-nl-3484 1 13 to to IN csirt-divd-nl-3484 1 14 the the DT csirt-divd-nl-3484 1 15 content content NN csirt-divd-nl-3484 1 16 . . . csirt-divd-nl-3484 2 1 Home home NN csirt-divd-nl-3484 2 2 / / SYM csirt-divd-nl-3484 2 3 Cases case NNS csirt-divd-nl-3484 2 4 / / SYM csirt-divd-nl-3484 2 5 Divd-2021 divd-2021 CD csirt-divd-nl-3484 2 6 - - HYPH csirt-divd-nl-3484 2 7 00011 00011 CD csirt-divd-nl-3484 2 8 - - HYPH csirt-divd-nl-3484 2 9 kaseya kaseya NNP csirt-divd-nl-3484 2 10 vsa vsa NNP csirt-divd-nl-3484 2 11 limited limit VBD csirt-divd-nl-3484 2 12 disclosure disclosure NN csirt-divd-nl-3484 2 13 DIVD DIVD NNP csirt-divd-nl-3484 2 14 CSIRT CSIRT NNS csirt-divd-nl-3484 2 15 Making make VBG csirt-divd-nl-3484 2 16 the the DT csirt-divd-nl-3484 2 17 internet internet NN csirt-divd-nl-3484 2 18 safer safe JJR csirt-divd-nl-3484 2 19 through through IN csirt-divd-nl-3484 2 20 Coordinated Coordinated NNP csirt-divd-nl-3484 2 21 Vulnerability Vulnerability NNP csirt-divd-nl-3484 2 22 Disclosure Disclosure NNP csirt-divd-nl-3484 2 23 Menu Menu NNP csirt-divd-nl-3484 2 24 Home Home NNP csirt-divd-nl-3484 2 25 DIVD DIVD NNP csirt-divd-nl-3484 2 26 CSIRT csirt NN csirt-divd-nl-3484 2 27 Cases case NNS csirt-divd-nl-3484 2 28 DIVD-2021 divd-2021 NN csirt-divd-nl-3484 2 29 - - HYPH csirt-divd-nl-3484 2 30 00015 00015 CD csirt-divd-nl-3484 2 31 Telegram Telegram NNP csirt-divd-nl-3484 2 32 group group NN csirt-divd-nl-3484 2 33 shares share NNS csirt-divd-nl-3484 2 34 stolen steal VBD csirt-divd-nl-3484 2 35 credentials credential NNS csirt-divd-nl-3484 2 36 .... .... NFP csirt-divd-nl-3484 2 37 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 2 38 - - HYPH csirt-divd-nl-3484 2 39 00014 00014 CD csirt-divd-nl-3484 2 40 DIVD DIVD NNP csirt-divd-nl-3484 2 41 recommends recommend VBZ csirt-divd-nl-3484 2 42 not not RB csirt-divd-nl-3484 2 43 exposing expose VBG csirt-divd-nl-3484 2 44 the the DT csirt-divd-nl-3484 2 45 on on IN csirt-divd-nl-3484 2 46 - - HYPH csirt-divd-nl-3484 2 47 premise premise NN csirt-divd-nl-3484 2 48 Kaseya Kaseya NNP csirt-divd-nl-3484 2 49 Unitrends unitrend VBZ csirt-divd-nl-3484 2 50 servers server NNS csirt-divd-nl-3484 2 51 to to IN csirt-divd-nl-3484 2 52 the the DT csirt-divd-nl-3484 2 53 ... ... : csirt-divd-nl-3484 2 54 DIVD-2021 divd-2021 JJ csirt-divd-nl-3484 2 55 - - HYPH csirt-divd-nl-3484 2 56 00012 00012 CD csirt-divd-nl-3484 2 57 Botnet Botnet NNP csirt-divd-nl-3484 2 58 stolen steal VBN csirt-divd-nl-3484 2 59 credentials credential NNS csirt-divd-nl-3484 2 60 ... ... : csirt-divd-nl-3484 2 61 DIVD-2021 divd-2021 JJ csirt-divd-nl-3484 2 62 - - HYPH csirt-divd-nl-3484 2 63 00011 00011 CD csirt-divd-nl-3484 2 64 Multiple multiple JJ csirt-divd-nl-3484 2 65 vulnerabilities vulnerability NNS csirt-divd-nl-3484 2 66 discovered discover VBN csirt-divd-nl-3484 2 67 in in IN csirt-divd-nl-3484 2 68 Kaseya Kaseya NNP csirt-divd-nl-3484 2 69 VSA VSA NNP csirt-divd-nl-3484 2 70 .... .... . csirt-divd-nl-3484 2 71 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 2 72 - - HYPH csirt-divd-nl-3484 2 73 00010 00010 CD csirt-divd-nl-3484 2 74 A a DT csirt-divd-nl-3484 2 75 PreAuth PreAuth NNP csirt-divd-nl-3484 2 76 RCE RCE NNP csirt-divd-nl-3484 2 77 vulnerability vulnerability NN csirt-divd-nl-3484 2 78 has have VBZ csirt-divd-nl-3484 2 79 been be VBN csirt-divd-nl-3484 2 80 found find VBN csirt-divd-nl-3484 2 81 in in IN csirt-divd-nl-3484 2 82 vCenter vCenter NNP csirt-divd-nl-3484 2 83 Server Server NNP csirt-divd-nl-3484 2 84 ... ... : csirt-divd-nl-3484 2 85 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 2 86 - - HYPH csirt-divd-nl-3484 2 87 00005 00005 CD csirt-divd-nl-3484 2 88 A a DT csirt-divd-nl-3484 2 89 PreAuth PreAuth NNP csirt-divd-nl-3484 2 90 RCE RCE NNP csirt-divd-nl-3484 2 91 vulnerability vulnerability NN csirt-divd-nl-3484 2 92 has have VBZ csirt-divd-nl-3484 2 93 been be VBN csirt-divd-nl-3484 2 94 found find VBN csirt-divd-nl-3484 2 95 in in IN csirt-divd-nl-3484 2 96 Pulse Pulse NNP csirt-divd-nl-3484 2 97 Connect Connect NNP csirt-divd-nl-3484 2 98 Secure Secure NNP csirt-divd-nl-3484 2 99 ... ... : csirt-divd-nl-3484 2 100 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 2 101 - - HYPH csirt-divd-nl-3484 2 102 00004 00004 CD csirt-divd-nl-3484 2 103 A a DT csirt-divd-nl-3484 2 104 list list NN csirt-divd-nl-3484 2 105 of of IN csirt-divd-nl-3484 2 106 credentials credential NNS csirt-divd-nl-3484 2 107 that that WDT csirt-divd-nl-3484 2 108 phishers phisher NNS csirt-divd-nl-3484 2 109 gained gain VBD csirt-divd-nl-3484 2 110 from from IN csirt-divd-nl-3484 2 111 victims victim NNS csirt-divd-nl-3484 2 112 has have VBZ csirt-divd-nl-3484 2 113 leaked leak VBN csirt-divd-nl-3484 2 114 and and CC csirt-divd-nl-3484 2 115 has have VBZ csirt-divd-nl-3484 2 116 ... ... : csirt-divd-nl-3484 2 117 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 2 118 - - HYPH csirt-divd-nl-3484 2 119 00002 00002 CD csirt-divd-nl-3484 2 120 Kaseya Kaseya NNP csirt-divd-nl-3484 2 121 recommends recommend VBZ csirt-divd-nl-3484 2 122 disabling disable VBG csirt-divd-nl-3484 2 123 the the DT csirt-divd-nl-3484 2 124 on on IN csirt-divd-nl-3484 2 125 - - HYPH csirt-divd-nl-3484 2 126 premise premise NN csirt-divd-nl-3484 2 127 Kaseya Kaseya NNP csirt-divd-nl-3484 2 128 VSA VSA NNP csirt-divd-nl-3484 2 129 servers server NNS csirt-divd-nl-3484 2 130 immediately immediately RB csirt-divd-nl-3484 2 131 .... .... . csirt-divd-nl-3484 2 132 DIVD-2021 divd-2021 NN csirt-divd-nl-3484 2 133 - - HYPH csirt-divd-nl-3484 2 134 00001 00001 CD csirt-divd-nl-3484 2 135 On on IN csirt-divd-nl-3484 2 136 - - HYPH csirt-divd-nl-3484 2 137 prem prem NN csirt-divd-nl-3484 2 138 Exchange Exchange NNP csirt-divd-nl-3484 2 139 Servers Servers NNPS csirt-divd-nl-3484 2 140 targeted target VBD csirt-divd-nl-3484 2 141 with with IN csirt-divd-nl-3484 2 142 0-day 0-day NN csirt-divd-nl-3484 2 143 exploits exploit NNS csirt-divd-nl-3484 2 144 ... ... : csirt-divd-nl-3484 2 145 DIVD-2020 divd-2020 NN csirt-divd-nl-3484 2 146 - - HYPH csirt-divd-nl-3484 2 147 00014 00014 CD csirt-divd-nl-3484 2 148 SolarWinds SolarWinds NNP csirt-divd-nl-3484 2 149 Orion Orion NNP csirt-divd-nl-3484 2 150 API api NN csirt-divd-nl-3484 2 151 authentication authentication NN csirt-divd-nl-3484 2 152 bypass bypass NN csirt-divd-nl-3484 2 153 ... ... : csirt-divd-nl-3484 2 154 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 155 - - HYPH csirt-divd-nl-3484 2 156 00013 00013 CD csirt-divd-nl-3484 2 157 A a DT csirt-divd-nl-3484 2 158 list list NN csirt-divd-nl-3484 2 159 of of IN csirt-divd-nl-3484 2 160 credentials credential NNS csirt-divd-nl-3484 2 161 that that WDT csirt-divd-nl-3484 2 162 phishers phisher NNS csirt-divd-nl-3484 2 163 gained gain VBD csirt-divd-nl-3484 2 164 from from IN csirt-divd-nl-3484 2 165 victims victim NNS csirt-divd-nl-3484 2 166 has have VBZ csirt-divd-nl-3484 2 167 leaked leak VBN csirt-divd-nl-3484 2 168 and and CC csirt-divd-nl-3484 2 169 has have VBZ csirt-divd-nl-3484 2 170 ... ... : csirt-divd-nl-3484 2 171 DIVD-2020 divd-2020 NN csirt-divd-nl-3484 2 172 - - HYPH csirt-divd-nl-3484 2 173 00012 00012 CD csirt-divd-nl-3484 2 174 A a DT csirt-divd-nl-3484 2 175 list list NN csirt-divd-nl-3484 2 176 of of IN csirt-divd-nl-3484 2 177 49 49 CD csirt-divd-nl-3484 2 178 577 577 CD csirt-divd-nl-3484 2 179 vulnerable vulnerable JJ csirt-divd-nl-3484 2 180 Fortinet Fortinet NNP csirt-divd-nl-3484 2 181 devices device NNS csirt-divd-nl-3484 2 182 leaked leak VBD csirt-divd-nl-3484 2 183 online online RB csirt-divd-nl-3484 2 184 ... ... . csirt-divd-nl-3484 2 185 DIVD-2020 divd-2020 NN csirt-divd-nl-3484 2 186 - - HYPH csirt-divd-nl-3484 2 187 00011 00011 CD csirt-divd-nl-3484 2 188 Four four CD csirt-divd-nl-3484 2 189 critical critical JJ csirt-divd-nl-3484 2 190 vulnerabilities vulnerability NNS csirt-divd-nl-3484 2 191 in in IN csirt-divd-nl-3484 2 192 Vembu Vembu NNP csirt-divd-nl-3484 2 193 BDR BDR NNP csirt-divd-nl-3484 2 194 ... ... HYPH csirt-divd-nl-3484 2 195 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 196 - - HYPH csirt-divd-nl-3484 2 197 00010 00010 CD csirt-divd-nl-3484 2 198 WordPress WordPress NNP csirt-divd-nl-3484 2 199 Plugin Plugin NNP csirt-divd-nl-3484 2 200 wpDiscuz wpDiscuz NNP csirt-divd-nl-3484 2 201 has have VBZ csirt-divd-nl-3484 2 202 a a DT csirt-divd-nl-3484 2 203 vulnerability vulnerability NN csirt-divd-nl-3484 2 204 that that WDT csirt-divd-nl-3484 2 205 alllows alllow VBZ csirt-divd-nl-3484 2 206 attackers attacker NNS csirt-divd-nl-3484 2 207 to to IN csirt-divd-nl-3484 2 208 tak tak NNP csirt-divd-nl-3484 2 209 ... ... : csirt-divd-nl-3484 2 210 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 211 - - HYPH csirt-divd-nl-3484 2 212 00009 00009 CD csirt-divd-nl-3484 2 213 Data Data NNP csirt-divd-nl-3484 2 214 dumped dump VBN csirt-divd-nl-3484 2 215 from from IN csirt-divd-nl-3484 2 216 compromised compromise VBN csirt-divd-nl-3484 2 217 Pulse Pulse NNP csirt-divd-nl-3484 2 218 Secure Secure NNP csirt-divd-nl-3484 2 219 VPN VPN NNP csirt-divd-nl-3484 2 220 enterprise enterprise NN csirt-divd-nl-3484 2 221 servers server NNS csirt-divd-nl-3484 2 222 .... .... . csirt-divd-nl-3484 2 223 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 224 - - HYPH csirt-divd-nl-3484 2 225 00008 00008 CD csirt-divd-nl-3484 2 226 313 313 CD csirt-divd-nl-3484 2 227 000 000 CD csirt-divd-nl-3484 2 228 .NL .NL : csirt-divd-nl-3484 2 229 domains domain NNS csirt-divd-nl-3484 2 230 running run VBG csirt-divd-nl-3484 2 231 Wordpress Wordpress NNP csirt-divd-nl-3484 2 232 scanned scan VBD csirt-divd-nl-3484 2 233 .... .... . csirt-divd-nl-3484 2 234 DIVD-2020 divd-2020 NN csirt-divd-nl-3484 2 235 - - HYPH csirt-divd-nl-3484 2 236 00007 00007 CD csirt-divd-nl-3484 2 237 Citrix Citrix NNP csirt-divd-nl-3484 2 238 ShareFile ShareFile NNP csirt-divd-nl-3484 2 239 storage storage NN csirt-divd-nl-3484 2 240 zones zone NNS csirt-divd-nl-3484 2 241 Controller Controller NNP csirt-divd-nl-3484 2 242 multiple multiple JJ csirt-divd-nl-3484 2 243 security security NN csirt-divd-nl-3484 2 244 updates update NNS csirt-divd-nl-3484 2 245 ... ... : csirt-divd-nl-3484 2 246 DIVD-2020 divd-2020 NN csirt-divd-nl-3484 2 247 - - HYPH csirt-divd-nl-3484 2 248 00006 00006 CD csirt-divd-nl-3484 2 249 SMBv3 SMBv3 NNP csirt-divd-nl-3484 2 250 Server Server NNP csirt-divd-nl-3484 2 251 Compression Compression NNP csirt-divd-nl-3484 2 252 Transform Transform NNP csirt-divd-nl-3484 2 253 Header Header NNP csirt-divd-nl-3484 2 254 Memory Memory NNP csirt-divd-nl-3484 2 255 Corruption Corruption NNP csirt-divd-nl-3484 2 256 ... ... : csirt-divd-nl-3484 2 257 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 258 - - HYPH csirt-divd-nl-3484 2 259 00005 00005 CD csirt-divd-nl-3484 2 260 Apache Apache NNP csirt-divd-nl-3484 2 261 Tomcat Tomcat NNP csirt-divd-nl-3484 2 262 AJP AJP NNP csirt-divd-nl-3484 2 263 File File NNP csirt-divd-nl-3484 2 264 Read read NN csirt-divd-nl-3484 2 265 / / SYM csirt-divd-nl-3484 2 266 Inclusion Inclusion NNP csirt-divd-nl-3484 2 267 Vulnerability Vulnerability NNP csirt-divd-nl-3484 2 268 ... ... : csirt-divd-nl-3484 2 269 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 270 - - HYPH csirt-divd-nl-3484 2 271 00004 00004 CD csirt-divd-nl-3484 2 272 List List NNP csirt-divd-nl-3484 2 273 of of IN csirt-divd-nl-3484 2 274 Mirai Mirai NNP csirt-divd-nl-3484 2 275 botnet botnet NN csirt-divd-nl-3484 2 276 victims victim NNS csirt-divd-nl-3484 2 277 published publish VBN csirt-divd-nl-3484 2 278 with with IN csirt-divd-nl-3484 2 279 credentials credential NNS csirt-divd-nl-3484 2 280 ... ... : csirt-divd-nl-3484 2 281 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 282 - - HYPH csirt-divd-nl-3484 2 283 00003 00003 CD csirt-divd-nl-3484 2 284 Exploits exploit NNS csirt-divd-nl-3484 2 285 available available JJ csirt-divd-nl-3484 2 286 for for IN csirt-divd-nl-3484 2 287 MS MS NNP csirt-divd-nl-3484 2 288 RDP RDP NNP csirt-divd-nl-3484 2 289 Gateway Gateway NNP csirt-divd-nl-3484 2 290 Bluegate Bluegate NNP csirt-divd-nl-3484 2 291 ... ... : csirt-divd-nl-3484 2 292 DIVD-2020 divd-2020 NN csirt-divd-nl-3484 2 293 - - HYPH csirt-divd-nl-3484 2 294 00002 00002 CD csirt-divd-nl-3484 2 295 Wildcard Wildcard NNP csirt-divd-nl-3484 2 296 Certificates Certificates NNPS csirt-divd-nl-3484 2 297 Citrix Citrix NNP csirt-divd-nl-3484 2 298 ADC ADC NNP csirt-divd-nl-3484 2 299 ... ... : csirt-divd-nl-3484 2 300 DIVD-2020 DIVD-2020 NNP csirt-divd-nl-3484 2 301 - - HYPH csirt-divd-nl-3484 2 302 00001 00001 CD csirt-divd-nl-3484 2 303 Citrix Citrix NNP csirt-divd-nl-3484 2 304 ADC ADC NNP csirt-divd-nl-3484 2 305 ... ... : csirt-divd-nl-3484 2 306 CVEs CVEs NNP csirt-divd-nl-3484 2 307 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 308 - - HYPH csirt-divd-nl-3484 2 309 30201 30201 CD csirt-divd-nl-3484 2 310 - - HYPH csirt-divd-nl-3484 2 311 Authenticated authenticate VBN csirt-divd-nl-3484 2 312 XML XML NNP csirt-divd-nl-3484 2 313 External External NNP csirt-divd-nl-3484 2 314 Entity Entity NNP csirt-divd-nl-3484 2 315 vulnerability vulnerability NN csirt-divd-nl-3484 2 316 in in IN csirt-divd-nl-3484 2 317 Kaseya Kaseya NNP csirt-divd-nl-3484 2 318 VS VS NNP csirt-divd-nl-3484 2 319 ... ... : csirt-divd-nl-3484 2 320 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 321 - - HYPH csirt-divd-nl-3484 2 322 30121 30121 CD csirt-divd-nl-3484 2 323 - - HYPH csirt-divd-nl-3484 2 324 Authenticated authenticate VBN csirt-divd-nl-3484 2 325 local local JJ csirt-divd-nl-3484 2 326 file file NN csirt-divd-nl-3484 2 327 inclusion inclusion NN csirt-divd-nl-3484 2 328 in in IN csirt-divd-nl-3484 2 329 Kaseya Kaseya NNP csirt-divd-nl-3484 2 330 VSA VSA NNP csirt-divd-nl-3484 2 331 < < XX csirt-divd-nl-3484 2 332 v9.5.6 v9.5.6 NNP csirt-divd-nl-3484 2 333 ... ... : csirt-divd-nl-3484 2 334 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 335 - - HYPH csirt-divd-nl-3484 2 336 30120 30120 CD csirt-divd-nl-3484 2 337 - - HYPH csirt-divd-nl-3484 2 338 2FA 2fa CD csirt-divd-nl-3484 2 339 bypass bypass NN csirt-divd-nl-3484 2 340 in in IN csirt-divd-nl-3484 2 341 Kaseya Kaseya NNP csirt-divd-nl-3484 2 342 VSA VSA NNP csirt-divd-nl-3484 2 343 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 344 - - HYPH csirt-divd-nl-3484 2 345 30119 30119 CD csirt-divd-nl-3484 2 346 - - HYPH csirt-divd-nl-3484 2 347 Authenticated Authenticated NNP csirt-divd-nl-3484 2 348 Authenticated Authenticated NNP csirt-divd-nl-3484 2 349 reflective reflective JJ csirt-divd-nl-3484 2 350 XSS XSS NNP csirt-divd-nl-3484 2 351 in in IN csirt-divd-nl-3484 2 352 Kaseya Kaseya NNP csirt-divd-nl-3484 2 353 VSA VSA NNP csirt-divd-nl-3484 2 354 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 355 - - HYPH csirt-divd-nl-3484 2 356 30118 30118 CD csirt-divd-nl-3484 2 357 - - HYPH csirt-divd-nl-3484 2 358 Unautheticated unautheticate VBN csirt-divd-nl-3484 2 359 RCE RCE NNP csirt-divd-nl-3484 2 360 in in IN csirt-divd-nl-3484 2 361 Kaseya Kaseya NNP csirt-divd-nl-3484 2 362 VSA VSA NNP csirt-divd-nl-3484 2 363 < < XX csirt-divd-nl-3484 2 364 v9.5.5 v9.5.5 NNP csirt-divd-nl-3484 2 365 ... ... : csirt-divd-nl-3484 2 366 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 367 - - HYPH csirt-divd-nl-3484 2 368 30117 30117 CD csirt-divd-nl-3484 2 369 - - HYPH csirt-divd-nl-3484 2 370 Autheticated autheticate VBN csirt-divd-nl-3484 2 371 SQL sql NN csirt-divd-nl-3484 2 372 injection injection NN csirt-divd-nl-3484 2 373 in in IN csirt-divd-nl-3484 2 374 Kaseya Kaseya NNP csirt-divd-nl-3484 2 375 VSA VSA NNP csirt-divd-nl-3484 2 376 < < XX csirt-divd-nl-3484 2 377 v9.5.6 v9.5.6 NNP csirt-divd-nl-3484 2 378 ... ... : csirt-divd-nl-3484 2 379 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 380 - - HYPH csirt-divd-nl-3484 2 381 30116 30116 CD csirt-divd-nl-3484 2 382 - - HYPH csirt-divd-nl-3484 2 383 Unautheticated unautheticated JJ csirt-divd-nl-3484 2 384 credential credential JJ csirt-divd-nl-3484 2 385 leak leak NN csirt-divd-nl-3484 2 386 and and CC csirt-divd-nl-3484 2 387 business business NN csirt-divd-nl-3484 2 388 logic logic NN csirt-divd-nl-3484 2 389 flaw flaw NN csirt-divd-nl-3484 2 390 in in IN csirt-divd-nl-3484 2 391 Ka Ka NNP csirt-divd-nl-3484 2 392 ... ... NFP csirt-divd-nl-3484 2 393 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 394 - - HYPH csirt-divd-nl-3484 2 395 26474 26474 CD csirt-divd-nl-3484 2 396 - - HYPH csirt-divd-nl-3484 2 397 Unauthenticated unauthenticated JJ csirt-divd-nl-3484 2 398 server server NN csirt-divd-nl-3484 2 399 side side NN csirt-divd-nl-3484 2 400 request request NN csirt-divd-nl-3484 2 401 forgery forgery NN csirt-divd-nl-3484 2 402 in in IN csirt-divd-nl-3484 2 403 Vembu vembu JJ csirt-divd-nl-3484 2 404 product product NN csirt-divd-nl-3484 2 405 ... ... : csirt-divd-nl-3484 2 406 CVE-2021 cve-2021 NN csirt-divd-nl-3484 2 407 - - HYPH csirt-divd-nl-3484 2 408 26473 26473 CD csirt-divd-nl-3484 2 409 - - HYPH csirt-divd-nl-3484 2 410 Unauthenticated unauthenticated JJ csirt-divd-nl-3484 2 411 arbitrary arbitrary JJ csirt-divd-nl-3484 2 412 file file NN csirt-divd-nl-3484 2 413 upload upload JJ csirt-divd-nl-3484 2 414 and and CC csirt-divd-nl-3484 2 415 command command NN csirt-divd-nl-3484 2 416 execution execution NN csirt-divd-nl-3484 2 417 ... ... : csirt-divd-nl-3484 2 418 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 2 419 - - HYPH csirt-divd-nl-3484 2 420 26472 26472 CD csirt-divd-nl-3484 2 421 - - HYPH csirt-divd-nl-3484 2 422 Unauthenticated unauthenticated JJ csirt-divd-nl-3484 2 423 remote remote JJ csirt-divd-nl-3484 2 424 command command NN csirt-divd-nl-3484 2 425 execution execution NN csirt-divd-nl-3484 2 426 in in IN csirt-divd-nl-3484 2 427 Vembu vembu JJ csirt-divd-nl-3484 2 428 products product NNS csirt-divd-nl-3484 2 429 ... ... : csirt-divd-nl-3484 2 430 Blog Blog NNP csirt-divd-nl-3484 2 431 2021 2021 CD csirt-divd-nl-3484 2 432 - - HYPH csirt-divd-nl-3484 2 433 07 07 CD csirt-divd-nl-3484 2 434 - - HYPH csirt-divd-nl-3484 2 435 07 07 CD csirt-divd-nl-3484 2 436 : : : csirt-divd-nl-3484 2 437 Kaseya Kaseya NNP csirt-divd-nl-3484 2 438 VSA VSA NNP csirt-divd-nl-3484 2 439 Limited Limited NNP csirt-divd-nl-3484 2 440 Disclosure Disclosure NNP csirt-divd-nl-3484 2 441 ... ... : csirt-divd-nl-3484 2 442 2021 2021 CD csirt-divd-nl-3484 2 443 - - SYM csirt-divd-nl-3484 2 444 07 07 CD csirt-divd-nl-3484 2 445 - - HYPH csirt-divd-nl-3484 2 446 06 06 CD csirt-divd-nl-3484 2 447 : : : csirt-divd-nl-3484 2 448 Kaseya Kaseya NNP csirt-divd-nl-3484 2 449 Case Case NNP csirt-divd-nl-3484 2 450 Update Update NNP csirt-divd-nl-3484 2 451 3 3 CD csirt-divd-nl-3484 2 452 ... ... SYM csirt-divd-nl-3484 2 453 2021 2021 CD csirt-divd-nl-3484 2 454 - - SYM csirt-divd-nl-3484 2 455 07 07 CD csirt-divd-nl-3484 2 456 - - HYPH csirt-divd-nl-3484 2 457 04 04 CD csirt-divd-nl-3484 2 458 : : : csirt-divd-nl-3484 2 459 Kaseya Kaseya NNP csirt-divd-nl-3484 2 460 Case Case NNP csirt-divd-nl-3484 2 461 Update Update NNP csirt-divd-nl-3484 2 462 2 2 CD csirt-divd-nl-3484 2 463 ... ... SYM csirt-divd-nl-3484 2 464 2021 2021 CD csirt-divd-nl-3484 2 465 - - SYM csirt-divd-nl-3484 2 466 07 07 CD csirt-divd-nl-3484 2 467 - - HYPH csirt-divd-nl-3484 2 468 03 03 CD csirt-divd-nl-3484 2 469 : : : csirt-divd-nl-3484 2 470 Kaseya Kaseya NNP csirt-divd-nl-3484 2 471 Case Case NNP csirt-divd-nl-3484 2 472 Update update NN csirt-divd-nl-3484 2 473 ... ... NFP csirt-divd-nl-3484 2 474 2021 2021 CD csirt-divd-nl-3484 2 475 - - SYM csirt-divd-nl-3484 2 476 07 07 CD csirt-divd-nl-3484 2 477 - - HYPH csirt-divd-nl-3484 2 478 02 02 CD csirt-divd-nl-3484 2 479 : : : csirt-divd-nl-3484 2 480 Kaseya Kaseya NNP csirt-divd-nl-3484 2 481 VSA VSA NNP csirt-divd-nl-3484 2 482 Advisory Advisory NNP csirt-divd-nl-3484 2 483 ... ... : csirt-divd-nl-3484 2 484 2021 2021 CD csirt-divd-nl-3484 2 485 - - HYPH csirt-divd-nl-3484 2 486 06 06 CD csirt-divd-nl-3484 2 487 - - HYPH csirt-divd-nl-3484 2 488 06 06 CD csirt-divd-nl-3484 2 489 : : : csirt-divd-nl-3484 2 490 vCenter vCenter NNP csirt-divd-nl-3484 2 491 Server Server NNP csirt-divd-nl-3484 2 492 PreAuth PreAuth NNP csirt-divd-nl-3484 2 493 RCE RCE NNP csirt-divd-nl-3484 2 494 ... ... : csirt-divd-nl-3484 2 495 2021 2021 CD csirt-divd-nl-3484 2 496 - - HYPH csirt-divd-nl-3484 2 497 06 06 CD csirt-divd-nl-3484 2 498 - - HYPH csirt-divd-nl-3484 2 499 03 03 CD csirt-divd-nl-3484 2 500 : : : csirt-divd-nl-3484 2 501 Warehouse Warehouse NNP csirt-divd-nl-3484 2 502 Botnet Botnet NNP csirt-divd-nl-3484 2 503 ... ... NFP csirt-divd-nl-3484 2 504 2021 2021 CD csirt-divd-nl-3484 2 505 - - HYPH csirt-divd-nl-3484 2 506 05 05 CD csirt-divd-nl-3484 2 507 - - HYPH csirt-divd-nl-3484 2 508 14 14 CD csirt-divd-nl-3484 2 509 : : : csirt-divd-nl-3484 2 510 Closing Closing NNP csirt-divd-nl-3484 2 511 ProxyLogon ProxyLogon NNP csirt-divd-nl-3484 2 512 case case NN csirt-divd-nl-3484 2 513 / / SYM csirt-divd-nl-3484 2 514 Case Case NNP csirt-divd-nl-3484 2 515 ProxyLogon ProxyLogon NNP csirt-divd-nl-3484 2 516 gesloten gesloten NN csirt-divd-nl-3484 2 517 ... ... NFP csirt-divd-nl-3484 2 518 2021 2021 CD csirt-divd-nl-3484 2 519 - - SYM csirt-divd-nl-3484 2 520 05 05 CD csirt-divd-nl-3484 2 521 - - HYPH csirt-divd-nl-3484 2 522 11 11 CD csirt-divd-nl-3484 2 523 : : : csirt-divd-nl-3484 2 524 Vembu Vembu NNP csirt-divd-nl-3484 2 525 Zero Zero NNP csirt-divd-nl-3484 2 526 Days day NNS csirt-divd-nl-3484 2 527 ... ... : csirt-divd-nl-3484 2 528 2021 2021 CD csirt-divd-nl-3484 2 529 - - HYPH csirt-divd-nl-3484 2 530 05 05 CD csirt-divd-nl-3484 2 531 - - SYM csirt-divd-nl-3484 2 532 10 10 CD csirt-divd-nl-3484 2 533 : : : csirt-divd-nl-3484 2 534 Pulse Pulse NNP csirt-divd-nl-3484 2 535 Secure secure JJ csirt-divd-nl-3484 2 536 PreAuth PreAuth NNP csirt-divd-nl-3484 2 537 RCE RCE NNP csirt-divd-nl-3484 2 538 ... ... : csirt-divd-nl-3484 2 539 More More JJR csirt-divd-nl-3484 2 540 ... ... . csirt-divd-nl-3484 3 1 Donate Donate NNP csirt-divd-nl-3484 3 2 RSS RSS NNP csirt-divd-nl-3484 3 3 Contact Contact NNP csirt-divd-nl-3484 3 4 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 3 5 - - HYPH csirt-divd-nl-3484 3 6 00011 00011 CD csirt-divd-nl-3484 3 7 - - HYPH csirt-divd-nl-3484 3 8 Kaseya Kaseya NNP csirt-divd-nl-3484 3 9 VSA VSA NNP csirt-divd-nl-3484 3 10 Limited Limited NNP csirt-divd-nl-3484 3 11 Disclosure Disclosure NNP csirt-divd-nl-3484 3 12 Our -PRON- PRP$ csirt-divd-nl-3484 3 13 reference reference NN csirt-divd-nl-3484 3 14 DIVD-2021 DIVD-2021 NNP csirt-divd-nl-3484 3 15 - - HYPH csirt-divd-nl-3484 3 16 00011 00011 CD csirt-divd-nl-3484 3 17 Case Case NNP csirt-divd-nl-3484 3 18 lead lead NN csirt-divd-nl-3484 3 19 Frank Frank NNP csirt-divd-nl-3484 3 20 Breedijk Breedijk NNP csirt-divd-nl-3484 3 21 Author Author NNP csirt-divd-nl-3484 3 22 Lennaert Lennaert NNP csirt-divd-nl-3484 3 23 Oudshoorn Oudshoorn NNP csirt-divd-nl-3484 3 24 Researcher(s researcher(s NN csirt-divd-nl-3484 3 25 ) ) -RRB- csirt-divd-nl-3484 3 26 Wietse Wietse NNP csirt-divd-nl-3484 3 27 Boonstra Boonstra NNP csirt-divd-nl-3484 3 28 Lennaert Lennaert NNP csirt-divd-nl-3484 3 29 Oudshoorn Oudshoorn NNP csirt-divd-nl-3484 3 30 Victor victor NN csirt-divd-nl-3484 3 31 Gevers gever NNS csirt-divd-nl-3484 3 32 Frank Frank NNP csirt-divd-nl-3484 3 33 Breedijk Breedijk NNP csirt-divd-nl-3484 3 34 Hidde Hidde NNP csirt-divd-nl-3484 3 35 Smit Smit NNP csirt-divd-nl-3484 3 36 CVE(s CVE(s NNP csirt-divd-nl-3484 3 37 ) ) -RRB- csirt-divd-nl-3484 3 38 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 39 - - HYPH csirt-divd-nl-3484 3 40 30116 30116 CD csirt-divd-nl-3484 3 41 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 42 - - HYPH csirt-divd-nl-3484 3 43 30117 30117 CD csirt-divd-nl-3484 3 44 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 45 - - HYPH csirt-divd-nl-3484 3 46 30118 30118 CD csirt-divd-nl-3484 3 47 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 48 - - HYPH csirt-divd-nl-3484 3 49 30119 30119 CD csirt-divd-nl-3484 3 50 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 51 - - HYPH csirt-divd-nl-3484 3 52 30120 30120 CD csirt-divd-nl-3484 3 53 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 54 - - HYPH csirt-divd-nl-3484 3 55 30121 30121 CD csirt-divd-nl-3484 3 56 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 3 57 - - HYPH csirt-divd-nl-3484 3 58 30201 30201 CD csirt-divd-nl-3484 3 59 Product Product NNP csirt-divd-nl-3484 3 60 Kaseya Kaseya NNP csirt-divd-nl-3484 3 61 VSA VSA NNP csirt-divd-nl-3484 3 62 Versions Versions NNP csirt-divd-nl-3484 3 63 All all RB csirt-divd-nl-3484 3 64 on on IN csirt-divd-nl-3484 3 65 - - HYPH csirt-divd-nl-3484 3 66 premise premise NN csirt-divd-nl-3484 3 67 Kaseya Kaseya NNP csirt-divd-nl-3484 3 68 VSA VSA NNP csirt-divd-nl-3484 3 69 versions version NNS csirt-divd-nl-3484 3 70 . . . csirt-divd-nl-3484 4 1 Recommendation recommendation NN csirt-divd-nl-3484 4 2 All all DT csirt-divd-nl-3484 4 3 on on IN csirt-divd-nl-3484 4 4 - - HYPH csirt-divd-nl-3484 4 5 premises premise VBZ csirt-divd-nl-3484 4 6 VSA VSA NNP csirt-divd-nl-3484 4 7 Servers Servers NNP csirt-divd-nl-3484 4 8 should should MD csirt-divd-nl-3484 4 9 continue continue VB csirt-divd-nl-3484 4 10 to to TO csirt-divd-nl-3484 4 11 remain remain VB csirt-divd-nl-3484 4 12 offline offline NN csirt-divd-nl-3484 4 13 until until IN csirt-divd-nl-3484 4 14 further further JJ csirt-divd-nl-3484 4 15 instructions instruction NNS csirt-divd-nl-3484 4 16 from from IN csirt-divd-nl-3484 4 17 Kaseya Kaseya NNP csirt-divd-nl-3484 4 18 about about IN csirt-divd-nl-3484 4 19 when when WRB csirt-divd-nl-3484 4 20 it -PRON- PRP csirt-divd-nl-3484 4 21 is be VBZ csirt-divd-nl-3484 4 22 safe safe JJ csirt-divd-nl-3484 4 23 to to TO csirt-divd-nl-3484 4 24 restore restore VB csirt-divd-nl-3484 4 25 operations operation NNS csirt-divd-nl-3484 4 26 . . . csirt-divd-nl-3484 5 1 A a DT csirt-divd-nl-3484 5 2 patch patch NN csirt-divd-nl-3484 5 3 will will MD csirt-divd-nl-3484 5 4 be be VB csirt-divd-nl-3484 5 5 required require VBN csirt-divd-nl-3484 5 6 to to TO csirt-divd-nl-3484 5 7 be be VB csirt-divd-nl-3484 5 8 installed instal VBN csirt-divd-nl-3484 5 9 prior prior RB csirt-divd-nl-3484 5 10 to to IN csirt-divd-nl-3484 5 11 restarting restart VBG csirt-divd-nl-3484 5 12 the the DT csirt-divd-nl-3484 5 13 VSA VSA NNP csirt-divd-nl-3484 5 14 and and CC csirt-divd-nl-3484 5 15 a a DT csirt-divd-nl-3484 5 16 set set NN csirt-divd-nl-3484 5 17 of of IN csirt-divd-nl-3484 5 18 recommendations recommendation NNS csirt-divd-nl-3484 5 19 on on IN csirt-divd-nl-3484 5 20 how how WRB csirt-divd-nl-3484 5 21 to to TO csirt-divd-nl-3484 5 22 increase increase VB csirt-divd-nl-3484 5 23 your -PRON- PRP$ csirt-divd-nl-3484 5 24 security security NN csirt-divd-nl-3484 5 25 posture posture NN csirt-divd-nl-3484 5 26 . . . csirt-divd-nl-3484 6 1 Status Status NNP csirt-divd-nl-3484 6 2 Open open JJ csirt-divd-nl-3484 6 3 English English NNP csirt-divd-nl-3484 6 4 below below IN csirt-divd-nl-3484 6 5 Summary Summary NNP csirt-divd-nl-3484 6 6 One one CD csirt-divd-nl-3484 6 7 of of IN csirt-divd-nl-3484 6 8 our -PRON- PRP$ csirt-divd-nl-3484 6 9 researchers researcher NNS csirt-divd-nl-3484 6 10 found find VBD csirt-divd-nl-3484 6 11 multiple multiple JJ csirt-divd-nl-3484 6 12 vulnerabilities vulnerability NNS csirt-divd-nl-3484 6 13 in in IN csirt-divd-nl-3484 6 14 Kaseya Kaseya NNP csirt-divd-nl-3484 6 15 VSA VSA NNP csirt-divd-nl-3484 6 16 , , , csirt-divd-nl-3484 6 17 which which WDT csirt-divd-nl-3484 6 18 we -PRON- PRP csirt-divd-nl-3484 6 19 were be VBD csirt-divd-nl-3484 6 20 in in IN csirt-divd-nl-3484 6 21 the the DT csirt-divd-nl-3484 6 22 process process NN csirt-divd-nl-3484 6 23 of of IN csirt-divd-nl-3484 6 24 responsible responsible JJ csirt-divd-nl-3484 6 25 disclosure disclosure NN csirt-divd-nl-3484 6 26 ( ( -LRB- csirt-divd-nl-3484 6 27 or or CC csirt-divd-nl-3484 6 28 Coordinated Coordinated NNP csirt-divd-nl-3484 6 29 Vulnerability Vulnerability NNP csirt-divd-nl-3484 6 30 Disclosure Disclosure NNP csirt-divd-nl-3484 6 31 ) ) -RRB- csirt-divd-nl-3484 6 32 with with IN csirt-divd-nl-3484 6 33 Kaseya Kaseya NNP csirt-divd-nl-3484 6 34 , , , csirt-divd-nl-3484 6 35 before before IN csirt-divd-nl-3484 6 36 all all PDT csirt-divd-nl-3484 6 37 these these DT csirt-divd-nl-3484 6 38 vulnerabilities vulnerability NNS csirt-divd-nl-3484 6 39 could could MD csirt-divd-nl-3484 6 40 be be VB csirt-divd-nl-3484 6 41 patched patch VBN csirt-divd-nl-3484 6 42 a a DT csirt-divd-nl-3484 6 43 ransomware ransomware NN csirt-divd-nl-3484 6 44 attack attack NN csirt-divd-nl-3484 6 45 happened happen VBD csirt-divd-nl-3484 6 46 using use VBG csirt-divd-nl-3484 6 47 Kaseya Kaseya NNP csirt-divd-nl-3484 6 48 VSA VSA NNP csirt-divd-nl-3484 6 49 . . . csirt-divd-nl-3484 7 1 Ever ever RB csirt-divd-nl-3484 7 2 since since IN csirt-divd-nl-3484 7 3 we -PRON- PRP csirt-divd-nl-3484 7 4 released release VBD csirt-divd-nl-3484 7 5 the the DT csirt-divd-nl-3484 7 6 news news NN csirt-divd-nl-3484 7 7 that that IN csirt-divd-nl-3484 7 8 we -PRON- PRP csirt-divd-nl-3484 7 9 indeed indeed RB csirt-divd-nl-3484 7 10 notified notify VBD csirt-divd-nl-3484 7 11 Kaseya Kaseya NNP csirt-divd-nl-3484 7 12 of of IN csirt-divd-nl-3484 7 13 a a DT csirt-divd-nl-3484 7 14 vulnerability vulnerability NN csirt-divd-nl-3484 7 15 used use VBN csirt-divd-nl-3484 7 16 in in IN csirt-divd-nl-3484 7 17 the the DT csirt-divd-nl-3484 7 18 ransomware ransomware NN csirt-divd-nl-3484 7 19 attack attack NN csirt-divd-nl-3484 7 20 , , , csirt-divd-nl-3484 7 21 we -PRON- PRP csirt-divd-nl-3484 7 22 have have VBP csirt-divd-nl-3484 7 23 been be VBN csirt-divd-nl-3484 7 24 getting get VBG csirt-divd-nl-3484 7 25 requests request NNS csirt-divd-nl-3484 7 26 to to TO csirt-divd-nl-3484 7 27 release release VB csirt-divd-nl-3484 7 28 details detail NNS csirt-divd-nl-3484 7 29 about about IN csirt-divd-nl-3484 7 30 these these DT csirt-divd-nl-3484 7 31 vulnerabilities vulnerability NNS csirt-divd-nl-3484 7 32 and and CC csirt-divd-nl-3484 7 33 the the DT csirt-divd-nl-3484 7 34 disclosure disclosure NN csirt-divd-nl-3484 7 35 timeline timeline NN csirt-divd-nl-3484 7 36 . . . csirt-divd-nl-3484 8 1 In in IN csirt-divd-nl-3484 8 2 line line NN csirt-divd-nl-3484 8 3 with with IN csirt-divd-nl-3484 8 4 the the DT csirt-divd-nl-3484 8 5 guidelines guideline NNS csirt-divd-nl-3484 8 6 for for IN csirt-divd-nl-3484 8 7 Coordinated Coordinated NNP csirt-divd-nl-3484 8 8 Vulnerability Vulnerability NNP csirt-divd-nl-3484 8 9 Disclosure Disclosure NNP csirt-divd-nl-3484 8 10 we -PRON- PRP csirt-divd-nl-3484 8 11 have have VBP csirt-divd-nl-3484 8 12 not not RB csirt-divd-nl-3484 8 13 disclosed disclose VBN csirt-divd-nl-3484 8 14 any any DT csirt-divd-nl-3484 8 15 details detail NNS csirt-divd-nl-3484 8 16 so so RB csirt-divd-nl-3484 8 17 far far RB csirt-divd-nl-3484 8 18 . . . csirt-divd-nl-3484 9 1 And and CC csirt-divd-nl-3484 9 2 , , , csirt-divd-nl-3484 9 3 while while IN csirt-divd-nl-3484 9 4 we -PRON- PRP csirt-divd-nl-3484 9 5 feel feel VBP csirt-divd-nl-3484 9 6 it -PRON- PRP csirt-divd-nl-3484 9 7 is be VBZ csirt-divd-nl-3484 9 8 time time NN csirt-divd-nl-3484 9 9 to to TO csirt-divd-nl-3484 9 10 be be VB csirt-divd-nl-3484 9 11 more more RBR csirt-divd-nl-3484 9 12 open open JJ csirt-divd-nl-3484 9 13 about about IN csirt-divd-nl-3484 9 14 this this DT csirt-divd-nl-3484 9 15 process process NN csirt-divd-nl-3484 9 16 and and CC csirt-divd-nl-3484 9 17 our -PRON- PRP$ csirt-divd-nl-3484 9 18 decisions decision NNS csirt-divd-nl-3484 9 19 regarding regard VBG csirt-divd-nl-3484 9 20 this this DT csirt-divd-nl-3484 9 21 matter matter NN csirt-divd-nl-3484 9 22 , , , csirt-divd-nl-3484 9 23 we -PRON- PRP csirt-divd-nl-3484 9 24 will will MD csirt-divd-nl-3484 9 25 still still RB csirt-divd-nl-3484 9 26 not not RB csirt-divd-nl-3484 9 27 release release VB csirt-divd-nl-3484 9 28 the the DT csirt-divd-nl-3484 9 29 full full JJ csirt-divd-nl-3484 9 30 details detail NNS csirt-divd-nl-3484 9 31 . . . csirt-divd-nl-3484 10 1 The the DT csirt-divd-nl-3484 10 2 vulnerabilities vulnerability NNS csirt-divd-nl-3484 10 3 We -PRON- PRP csirt-divd-nl-3484 10 4 notified notify VBD csirt-divd-nl-3484 10 5 Kaseya Kaseya NNP csirt-divd-nl-3484 10 6 of of IN csirt-divd-nl-3484 10 7 the the DT csirt-divd-nl-3484 10 8 following follow VBG csirt-divd-nl-3484 10 9 vulnerabilities vulnerability NNS csirt-divd-nl-3484 10 10 : : : csirt-divd-nl-3484 10 11 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 10 12 - - HYPH csirt-divd-nl-3484 10 13 30116 30116 CD csirt-divd-nl-3484 10 14 - - HYPH csirt-divd-nl-3484 10 15 A a DT csirt-divd-nl-3484 10 16 credentials credential NNS csirt-divd-nl-3484 10 17 leak leak NN csirt-divd-nl-3484 10 18 and and CC csirt-divd-nl-3484 10 19 business business NN csirt-divd-nl-3484 10 20 logic logic NN csirt-divd-nl-3484 10 21 flaw flaw NN csirt-divd-nl-3484 10 22 , , , csirt-divd-nl-3484 10 23 to to TO csirt-divd-nl-3484 10 24 be be VB csirt-divd-nl-3484 10 25 included include VBN csirt-divd-nl-3484 10 26 in in IN csirt-divd-nl-3484 10 27 9.5.7 9.5.7 CD csirt-divd-nl-3484 10 28 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 10 29 - - HYPH csirt-divd-nl-3484 10 30 30117 30117 CD csirt-divd-nl-3484 10 31 - - HYPH csirt-divd-nl-3484 10 32 An an DT csirt-divd-nl-3484 10 33 SQL SQL NNP csirt-divd-nl-3484 10 34 injection injection NN csirt-divd-nl-3484 10 35 vulnerability vulnerability NN csirt-divd-nl-3484 10 36 , , , csirt-divd-nl-3484 10 37 resolved resolve VBN csirt-divd-nl-3484 10 38 in in IN csirt-divd-nl-3484 10 39 May May NNP csirt-divd-nl-3484 10 40 8th 8th JJ csirt-divd-nl-3484 10 41 patch patch NN csirt-divd-nl-3484 10 42 . . . csirt-divd-nl-3484 11 1 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 11 2 - - HYPH csirt-divd-nl-3484 11 3 30118 30118 CD csirt-divd-nl-3484 11 4 - - HYPH csirt-divd-nl-3484 11 5 A a DT csirt-divd-nl-3484 11 6 Remote Remote NNP csirt-divd-nl-3484 11 7 Code Code NNP csirt-divd-nl-3484 11 8 Execution Execution NNP csirt-divd-nl-3484 11 9 vulnerability vulnerability NN csirt-divd-nl-3484 11 10 , , , csirt-divd-nl-3484 11 11 resolved resolve VBN csirt-divd-nl-3484 11 12 in in IN csirt-divd-nl-3484 11 13 April April NNP csirt-divd-nl-3484 11 14 10th 10th NN csirt-divd-nl-3484 11 15 patch patch NN csirt-divd-nl-3484 11 16 . . . csirt-divd-nl-3484 12 1 ( ( -LRB- csirt-divd-nl-3484 12 2 v9.5.6 v9.5.6 NNP csirt-divd-nl-3484 12 3 ) ) -RRB- csirt-divd-nl-3484 12 4 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 12 5 - - HYPH csirt-divd-nl-3484 12 6 30119 30119 CD csirt-divd-nl-3484 12 7 - - HYPH csirt-divd-nl-3484 12 8 A a NN csirt-divd-nl-3484 12 9 Cross Cross NNP csirt-divd-nl-3484 12 10 Site Site NNP csirt-divd-nl-3484 12 11 Scripting Scripting NNP csirt-divd-nl-3484 12 12 vulnerability vulnerability NN csirt-divd-nl-3484 12 13 , , , csirt-divd-nl-3484 12 14 to to TO csirt-divd-nl-3484 12 15 be be VB csirt-divd-nl-3484 12 16 included include VBN csirt-divd-nl-3484 12 17 in in IN csirt-divd-nl-3484 12 18 9.5.7 9.5.7 CD csirt-divd-nl-3484 12 19 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 12 20 - - HYPH csirt-divd-nl-3484 12 21 30120 30120 CD csirt-divd-nl-3484 12 22 - - HYPH csirt-divd-nl-3484 12 23 2FA 2fa CD csirt-divd-nl-3484 12 24 bypass bypass NN csirt-divd-nl-3484 12 25 , , , csirt-divd-nl-3484 12 26 to to TO csirt-divd-nl-3484 12 27 be be VB csirt-divd-nl-3484 12 28 resolved resolve VBN csirt-divd-nl-3484 12 29 in in IN csirt-divd-nl-3484 12 30 v9.5.7 v9.5.7 NNP csirt-divd-nl-3484 12 31 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 12 32 - - HYPH csirt-divd-nl-3484 12 33 30121 30121 CD csirt-divd-nl-3484 12 34 - - : csirt-divd-nl-3484 12 35 A a DT csirt-divd-nl-3484 12 36 Local Local NNP csirt-divd-nl-3484 12 37 File File NNP csirt-divd-nl-3484 12 38 Inclusion Inclusion NNP csirt-divd-nl-3484 12 39 vulnerability vulnerability NN csirt-divd-nl-3484 12 40 , , , csirt-divd-nl-3484 12 41 resolved resolve VBN csirt-divd-nl-3484 12 42 in in IN csirt-divd-nl-3484 12 43 May May NNP csirt-divd-nl-3484 12 44 8th 8th JJ csirt-divd-nl-3484 12 45 patch patch NN csirt-divd-nl-3484 12 46 . . . csirt-divd-nl-3484 13 1 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 13 2 - - HYPH csirt-divd-nl-3484 13 3 30201 30201 CD csirt-divd-nl-3484 13 4 - - HYPH csirt-divd-nl-3484 13 5 A a DT csirt-divd-nl-3484 13 6 XML XML NNP csirt-divd-nl-3484 13 7 External External NNP csirt-divd-nl-3484 13 8 Entity Entity NNP csirt-divd-nl-3484 13 9 vulnerability vulnerability NN csirt-divd-nl-3484 13 10 , , , csirt-divd-nl-3484 13 11 resolved resolve VBN csirt-divd-nl-3484 13 12 in in IN csirt-divd-nl-3484 13 13 May May NNP csirt-divd-nl-3484 13 14 8th 8th JJ csirt-divd-nl-3484 13 15 patch patch NN csirt-divd-nl-3484 13 16 . . . csirt-divd-nl-3484 14 1 What what WP csirt-divd-nl-3484 14 2 you -PRON- PRP csirt-divd-nl-3484 14 3 can can MD csirt-divd-nl-3484 14 4 do do VB csirt-divd-nl-3484 14 5 All all DT csirt-divd-nl-3484 14 6 on on RB csirt-divd-nl-3484 14 7 - - HYPH csirt-divd-nl-3484 14 8 premises premise VBZ csirt-divd-nl-3484 14 9 VSA VSA NNP csirt-divd-nl-3484 14 10 Servers Servers NNP csirt-divd-nl-3484 14 11 should should MD csirt-divd-nl-3484 14 12 continue continue VB csirt-divd-nl-3484 14 13 to to TO csirt-divd-nl-3484 14 14 remain remain VB csirt-divd-nl-3484 14 15 offline offline NN csirt-divd-nl-3484 14 16 until until IN csirt-divd-nl-3484 14 17 further further JJ csirt-divd-nl-3484 14 18 instructions instruction NNS csirt-divd-nl-3484 14 19 from from IN csirt-divd-nl-3484 14 20 Kaseya Kaseya NNP csirt-divd-nl-3484 14 21 about about IN csirt-divd-nl-3484 14 22 when when WRB csirt-divd-nl-3484 14 23 it -PRON- PRP csirt-divd-nl-3484 14 24 is be VBZ csirt-divd-nl-3484 14 25 safe safe JJ csirt-divd-nl-3484 14 26 to to TO csirt-divd-nl-3484 14 27 restore restore VB csirt-divd-nl-3484 14 28 operations operation NNS csirt-divd-nl-3484 14 29 . . . csirt-divd-nl-3484 15 1 A a DT csirt-divd-nl-3484 15 2 patch patch NN csirt-divd-nl-3484 15 3 will will MD csirt-divd-nl-3484 15 4 be be VB csirt-divd-nl-3484 15 5 required require VBN csirt-divd-nl-3484 15 6 to to TO csirt-divd-nl-3484 15 7 be be VB csirt-divd-nl-3484 15 8 installed instal VBN csirt-divd-nl-3484 15 9 prior prior RB csirt-divd-nl-3484 15 10 to to IN csirt-divd-nl-3484 15 11 restarting restart VBG csirt-divd-nl-3484 15 12 the the DT csirt-divd-nl-3484 15 13 VSA VSA NNP csirt-divd-nl-3484 15 14 and and CC csirt-divd-nl-3484 15 15 a a DT csirt-divd-nl-3484 15 16 set set NN csirt-divd-nl-3484 15 17 of of IN csirt-divd-nl-3484 15 18 recommendations recommendation NNS csirt-divd-nl-3484 15 19 on on IN csirt-divd-nl-3484 15 20 how how WRB csirt-divd-nl-3484 15 21 to to TO csirt-divd-nl-3484 15 22 increase increase VB csirt-divd-nl-3484 15 23 your -PRON- PRP$ csirt-divd-nl-3484 15 24 security security NN csirt-divd-nl-3484 15 25 posture posture NN csirt-divd-nl-3484 15 26 . . . csirt-divd-nl-3484 16 1 Kaseya Kaseya NNP csirt-divd-nl-3484 16 2 has have VBZ csirt-divd-nl-3484 16 3 released release VBN csirt-divd-nl-3484 16 4 a a DT csirt-divd-nl-3484 16 5 Detection Detection NNP csirt-divd-nl-3484 16 6 tool tool NN csirt-divd-nl-3484 16 7 tool tool NN csirt-divd-nl-3484 16 8 help help NN csirt-divd-nl-3484 16 9 determine determine VB csirt-divd-nl-3484 16 10 if if IN csirt-divd-nl-3484 16 11 a a DT csirt-divd-nl-3484 16 12 system system NN csirt-divd-nl-3484 16 13 has have VBZ csirt-divd-nl-3484 16 14 been be VBN csirt-divd-nl-3484 16 15 compromised compromise VBN csirt-divd-nl-3484 16 16 . . . csirt-divd-nl-3484 17 1 Cado Cado NNP csirt-divd-nl-3484 17 2 Security Security NNP csirt-divd-nl-3484 17 3 has have VBZ csirt-divd-nl-3484 17 4 made make VBN csirt-divd-nl-3484 17 5 a a DT csirt-divd-nl-3484 17 6 github github NNS csirt-divd-nl-3484 17 7 repository repository NN csirt-divd-nl-3484 17 8 with with IN csirt-divd-nl-3484 17 9 Resources resource NNS csirt-divd-nl-3484 17 10 for for IN csirt-divd-nl-3484 17 11 DFIR dfir NN csirt-divd-nl-3484 17 12 Professionals professional NNS csirt-divd-nl-3484 17 13 Responding respond VBG csirt-divd-nl-3484 17 14 to to IN csirt-divd-nl-3484 17 15 the the DT csirt-divd-nl-3484 17 16 REvil REvil NNP csirt-divd-nl-3484 17 17 Ransomware Ransomware NNP csirt-divd-nl-3484 17 18 Kaseya Kaseya NNP csirt-divd-nl-3484 17 19 Supply Supply NNP csirt-divd-nl-3484 17 20 Chain Chain NNP csirt-divd-nl-3484 17 21 Attack Attack NNP csirt-divd-nl-3484 17 22 . . . csirt-divd-nl-3484 18 1 We -PRON- PRP csirt-divd-nl-3484 18 2 recommend recommend VBP csirt-divd-nl-3484 18 3 that that IN csirt-divd-nl-3484 18 4 any any DT csirt-divd-nl-3484 18 5 Kaseya Kaseya NNP csirt-divd-nl-3484 18 6 server server NN csirt-divd-nl-3484 18 7 is be VBZ csirt-divd-nl-3484 18 8 carefully carefully RB csirt-divd-nl-3484 18 9 checked check VBN csirt-divd-nl-3484 18 10 for for IN csirt-divd-nl-3484 18 11 signs sign NNS csirt-divd-nl-3484 18 12 of of IN csirt-divd-nl-3484 18 13 compromise compromise NN csirt-divd-nl-3484 18 14 before before IN csirt-divd-nl-3484 18 15 taking take VBG csirt-divd-nl-3484 18 16 it -PRON- PRP csirt-divd-nl-3484 18 17 back back RB csirt-divd-nl-3484 18 18 into into IN csirt-divd-nl-3484 18 19 service service NN csirt-divd-nl-3484 18 20 , , , csirt-divd-nl-3484 18 21 including include VBG csirt-divd-nl-3484 18 22 , , , csirt-divd-nl-3484 18 23 but but CC csirt-divd-nl-3484 18 24 not not RB csirt-divd-nl-3484 18 25 limited limit VBN csirt-divd-nl-3484 18 26 to to IN csirt-divd-nl-3484 18 27 , , , csirt-divd-nl-3484 18 28 the the DT csirt-divd-nl-3484 18 29 IoCs IoCs NNP csirt-divd-nl-3484 18 30 published publish VBN csirt-divd-nl-3484 18 31 by by IN csirt-divd-nl-3484 18 32 Kaseya Kaseya NNP csirt-divd-nl-3484 18 33 . . . csirt-divd-nl-3484 19 1 What what WP csirt-divd-nl-3484 19 2 we -PRON- PRP csirt-divd-nl-3484 19 3 are be VBP csirt-divd-nl-3484 19 4 doing do VBG csirt-divd-nl-3484 19 5 The the DT csirt-divd-nl-3484 19 6 Dutch Dutch NNP csirt-divd-nl-3484 19 7 Institute Institute NNP csirt-divd-nl-3484 19 8 for for IN csirt-divd-nl-3484 19 9 Vulnerability Vulnerability NNP csirt-divd-nl-3484 19 10 Disclosure Disclosure NNP csirt-divd-nl-3484 19 11 ( ( -LRB- csirt-divd-nl-3484 19 12 DIVD DIVD NNP csirt-divd-nl-3484 19 13 ) ) -RRB- csirt-divd-nl-3484 19 14 performs perform VBZ csirt-divd-nl-3484 19 15 a a DT csirt-divd-nl-3484 19 16 daily daily JJ csirt-divd-nl-3484 19 17 scan scan NN csirt-divd-nl-3484 19 18 to to TO csirt-divd-nl-3484 19 19 detect detect VB csirt-divd-nl-3484 19 20 vulnerable vulnerable JJ csirt-divd-nl-3484 19 21 Kaseya Kaseya NNP csirt-divd-nl-3484 19 22 VSA VSA NNP csirt-divd-nl-3484 19 23 servers server NNS csirt-divd-nl-3484 19 24 and and CC csirt-divd-nl-3484 19 25 notify notify VB csirt-divd-nl-3484 19 26 the the DT csirt-divd-nl-3484 19 27 owners owner NNS csirt-divd-nl-3484 19 28 directly directly RB csirt-divd-nl-3484 19 29 or or CC csirt-divd-nl-3484 19 30 via via IN csirt-divd-nl-3484 19 31 the the DT csirt-divd-nl-3484 19 32 known know VBN csirt-divd-nl-3484 19 33 abuse abuse NN csirt-divd-nl-3484 19 34 channels channel NNS csirt-divd-nl-3484 19 35 , , , csirt-divd-nl-3484 19 36 Gov Gov NNP csirt-divd-nl-3484 19 37 - - HYPH csirt-divd-nl-3484 19 38 CERTs CERTs NNP csirt-divd-nl-3484 19 39 , , , csirt-divd-nl-3484 19 40 and and CC csirt-divd-nl-3484 19 41 other other JJ csirt-divd-nl-3484 19 42 trusted trusted JJ csirt-divd-nl-3484 19 43 channels channel NNS csirt-divd-nl-3484 19 44 . . . csirt-divd-nl-3484 20 1 We -PRON- PRP csirt-divd-nl-3484 20 2 have have VBP csirt-divd-nl-3484 20 3 identified identify VBN csirt-divd-nl-3484 20 4 this this DT csirt-divd-nl-3484 20 5 server server NN csirt-divd-nl-3484 20 6 by by IN csirt-divd-nl-3484 20 7 downloading download VBG csirt-divd-nl-3484 20 8 the the DT csirt-divd-nl-3484 20 9 paths path NNS csirt-divd-nl-3484 20 10 ‘ ' `` csirt-divd-nl-3484 20 11 / / SYM csirt-divd-nl-3484 20 12 ’ ' '' csirt-divd-nl-3484 20 13 , , , csirt-divd-nl-3484 20 14 ‘ ' `` csirt-divd-nl-3484 20 15 /api /api CD csirt-divd-nl-3484 20 16 / / SYM csirt-divd-nl-3484 20 17 v1.5 v1.5 CD csirt-divd-nl-3484 20 18 / / SYM csirt-divd-nl-3484 20 19 cw cw NN csirt-divd-nl-3484 20 20 / / SYM csirt-divd-nl-3484 20 21 environment environment NN csirt-divd-nl-3484 20 22 ’ ' '' csirt-divd-nl-3484 20 23 and and CC csirt-divd-nl-3484 20 24 ‘ ' `` csirt-divd-nl-3484 20 25 /install /install NN csirt-divd-nl-3484 20 26 / / SYM csirt-divd-nl-3484 20 27 kaseyalatestversion.xml kaseyalatestversion.xml NN csirt-divd-nl-3484 20 28 ’ ' '' csirt-divd-nl-3484 20 29 and and CC csirt-divd-nl-3484 20 30 matching match VBG csirt-divd-nl-3484 20 31 patterns pattern NNS csirt-divd-nl-3484 20 32 in in IN csirt-divd-nl-3484 20 33 these these DT csirt-divd-nl-3484 20 34 files file NNS csirt-divd-nl-3484 20 35 . . . csirt-divd-nl-3484 21 1 In in IN csirt-divd-nl-3484 21 2 the the DT csirt-divd-nl-3484 21 3 past past JJ csirt-divd-nl-3484 21 4 few few JJ csirt-divd-nl-3484 21 5 days day NNS csirt-divd-nl-3484 21 6 we -PRON- PRP csirt-divd-nl-3484 21 7 have have VBP csirt-divd-nl-3484 21 8 been be VBN csirt-divd-nl-3484 21 9 working work VBG csirt-divd-nl-3484 21 10 with with IN csirt-divd-nl-3484 21 11 Kaseya Kaseya NNP csirt-divd-nl-3484 21 12 to to TO csirt-divd-nl-3484 21 13 make make VB csirt-divd-nl-3484 21 14 sure sure JJ csirt-divd-nl-3484 21 15 customers customer NNS csirt-divd-nl-3484 21 16 turn turn VB csirt-divd-nl-3484 21 17 off off RP csirt-divd-nl-3484 21 18 their -PRON- PRP$ csirt-divd-nl-3484 21 19 systems system NNS csirt-divd-nl-3484 21 20 , , , csirt-divd-nl-3484 21 21 by by IN csirt-divd-nl-3484 21 22 tipping tip VBG csirt-divd-nl-3484 21 23 them -PRON- PRP csirt-divd-nl-3484 21 24 off off RP csirt-divd-nl-3484 21 25 about about IN csirt-divd-nl-3484 21 26 customers customer NNS csirt-divd-nl-3484 21 27 that that WDT csirt-divd-nl-3484 21 28 still still RB csirt-divd-nl-3484 21 29 have have VBP csirt-divd-nl-3484 21 30 systems system NNS csirt-divd-nl-3484 21 31 online online RB csirt-divd-nl-3484 21 32 , , , csirt-divd-nl-3484 21 33 and and CC csirt-divd-nl-3484 21 34 hope hope VBP csirt-divd-nl-3484 21 35 to to TO csirt-divd-nl-3484 21 36 be be VB csirt-divd-nl-3484 21 37 able able JJ csirt-divd-nl-3484 21 38 to to TO csirt-divd-nl-3484 21 39 continue continue VB csirt-divd-nl-3484 21 40 to to TO csirt-divd-nl-3484 21 41 work work VB csirt-divd-nl-3484 21 42 together together RB csirt-divd-nl-3484 21 43 to to TO csirt-divd-nl-3484 21 44 ensure ensure VB csirt-divd-nl-3484 21 45 that that IN csirt-divd-nl-3484 21 46 their -PRON- PRP$ csirt-divd-nl-3484 21 47 patch patch NN csirt-divd-nl-3484 21 48 is be VBZ csirt-divd-nl-3484 21 49 installed instal VBN csirt-divd-nl-3484 21 50 everywhere everywhere RB csirt-divd-nl-3484 21 51 . . . csirt-divd-nl-3484 22 1 Timeline Timeline NNP csirt-divd-nl-3484 22 2 Date Date NNP csirt-divd-nl-3484 22 3 Description Description NNP csirt-divd-nl-3484 22 4 01 01 CD csirt-divd-nl-3484 22 5 Apr Apr NNP csirt-divd-nl-3484 22 6 2021 2021 CD csirt-divd-nl-3484 22 7 Research Research NNP csirt-divd-nl-3484 22 8 start start NN csirt-divd-nl-3484 22 9 02 02 CD csirt-divd-nl-3484 22 10 Apr Apr NNP csirt-divd-nl-3484 22 11 2021 2021 CD csirt-divd-nl-3484 22 12 DIVD DIVD NNP csirt-divd-nl-3484 22 13 starts start VBZ csirt-divd-nl-3484 22 14 scanning scanning NN csirt-divd-nl-3484 22 15 internet internet NN csirt-divd-nl-3484 22 16 - - HYPH csirt-divd-nl-3484 22 17 facing face VBG csirt-divd-nl-3484 22 18 implementations implementation NNS csirt-divd-nl-3484 22 19 . . . csirt-divd-nl-3484 23 1 04 04 CD csirt-divd-nl-3484 23 2 Apr Apr NNP csirt-divd-nl-3484 23 3 2021 2021 CD csirt-divd-nl-3484 23 4 Start Start NNP csirt-divd-nl-3484 23 5 of of IN csirt-divd-nl-3484 23 6 the the DT csirt-divd-nl-3484 23 7 identification identification NN csirt-divd-nl-3484 23 8 of of IN csirt-divd-nl-3484 23 9 possible possible JJ csirt-divd-nl-3484 23 10 victims victim NNS csirt-divd-nl-3484 23 11 ( ( -LRB- csirt-divd-nl-3484 23 12 with with IN csirt-divd-nl-3484 23 13 internet internet NN csirt-divd-nl-3484 23 14 - - HYPH csirt-divd-nl-3484 23 15 facing face VBG csirt-divd-nl-3484 23 16 systems system NNS csirt-divd-nl-3484 23 17 ) ) -RRB- csirt-divd-nl-3484 23 18 . . . csirt-divd-nl-3484 24 1 06 06 CD csirt-divd-nl-3484 24 2 Apr Apr NNP csirt-divd-nl-3484 24 3 2021 2021 CD csirt-divd-nl-3484 24 4 Kaseya Kaseya NNP csirt-divd-nl-3484 24 5 informed inform VBD csirt-divd-nl-3484 24 6 . . . csirt-divd-nl-3484 25 1 10 10 CD csirt-divd-nl-3484 25 2 Apr Apr NNP csirt-divd-nl-3484 25 3 2021 2021 CD csirt-divd-nl-3484 25 4 Vendor Vendor NNP csirt-divd-nl-3484 25 5 starts start VBZ csirt-divd-nl-3484 25 6 issuing issue VBG csirt-divd-nl-3484 25 7 patches patch NNS csirt-divd-nl-3484 25 8 v9.5.5 v9.5.5 NNP csirt-divd-nl-3484 25 9 . . . csirt-divd-nl-3484 26 1 Resolving Resolving NNP csirt-divd-nl-3484 26 2 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 26 3 - - HYPH csirt-divd-nl-3484 26 4 30118 30118 CD csirt-divd-nl-3484 26 5 . . . csirt-divd-nl-3484 27 1 8 8 CD csirt-divd-nl-3484 27 2 May May NNP csirt-divd-nl-3484 27 3 2021 2021 CD csirt-divd-nl-3484 27 4 Vendor Vendor NNP csirt-divd-nl-3484 27 5 issues issue NNS csirt-divd-nl-3484 27 6 another another DT csirt-divd-nl-3484 27 7 patch patch VBP csirt-divd-nl-3484 27 8 v9.5.6 v9.5.6 NNP csirt-divd-nl-3484 27 9 . . . csirt-divd-nl-3484 28 1 Resolving Resolving NNP csirt-divd-nl-3484 28 2 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 28 3 - - HYPH csirt-divd-nl-3484 28 4 30117 30117 CD csirt-divd-nl-3484 28 5 , , , csirt-divd-nl-3484 28 6 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 28 7 - - HYPH csirt-divd-nl-3484 28 8 30121 30121 CD csirt-divd-nl-3484 28 9 , , , csirt-divd-nl-3484 28 10 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 28 11 - - HYPH csirt-divd-nl-3484 28 12 30201 30201 CD csirt-divd-nl-3484 28 13 . . . csirt-divd-nl-3484 29 1 04 04 CD csirt-divd-nl-3484 29 2 Jun Jun NNP csirt-divd-nl-3484 29 3 2021 2021 CD csirt-divd-nl-3484 29 4 DIVD DIVD NNP csirt-divd-nl-3484 29 5 CSIRT CSIRT NNP csirt-divd-nl-3484 29 6 hands hand NNS csirt-divd-nl-3484 29 7 over over IN csirt-divd-nl-3484 29 8 a a DT csirt-divd-nl-3484 29 9 list list NN csirt-divd-nl-3484 29 10 of of IN csirt-divd-nl-3484 29 11 identified identify VBN csirt-divd-nl-3484 29 12 Kaseya Kaseya NNP csirt-divd-nl-3484 29 13 VSA VSA NNP csirt-divd-nl-3484 29 14 hosts host VBZ csirt-divd-nl-3484 29 15 to to IN csirt-divd-nl-3484 29 16 Kaseya Kaseya NNP csirt-divd-nl-3484 29 17 . . . csirt-divd-nl-3484 30 1 26 26 CD csirt-divd-nl-3484 30 2 Jun Jun NNP csirt-divd-nl-3484 30 3 2021 2021 CD csirt-divd-nl-3484 30 4 9.5.7 9.5.7 CD csirt-divd-nl-3484 30 5 on on IN csirt-divd-nl-3484 30 6 SaaS SaaS NNP csirt-divd-nl-3484 30 7 Resolving Resolving NNP csirt-divd-nl-3484 30 8 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 30 9 - - HYPH csirt-divd-nl-3484 30 10 30116 30116 CD csirt-divd-nl-3484 30 11 and and CC csirt-divd-nl-3484 30 12 CVE-2021 CVE-2021 NNP csirt-divd-nl-3484 30 13 - - HYPH csirt-divd-nl-3484 30 14 30119 30119 CD csirt-divd-nl-3484 30 15 . . . csirt-divd-nl-3484 31 1 02 02 CD csirt-divd-nl-3484 31 2 Jul Jul NNP csirt-divd-nl-3484 31 3 2021 2021 CD csirt-divd-nl-3484 31 4 DIVD DIVD NNP csirt-divd-nl-3484 31 5 responds respond VBZ csirt-divd-nl-3484 31 6 to to IN csirt-divd-nl-3484 31 7 the the DT csirt-divd-nl-3484 31 8 ransomware ransomware NN csirt-divd-nl-3484 31 9 , , , csirt-divd-nl-3484 31 10 by by IN csirt-divd-nl-3484 31 11 scanning scan VBG csirt-divd-nl-3484 31 12 for for IN csirt-divd-nl-3484 31 13 Kaseya Kaseya NNP csirt-divd-nl-3484 31 14 VSA VSA NNP csirt-divd-nl-3484 31 15 instances instance NNS csirt-divd-nl-3484 31 16 reachable reachable JJ csirt-divd-nl-3484 31 17 via via IN csirt-divd-nl-3484 31 18 the the DT csirt-divd-nl-3484 31 19 Internet internet NN csirt-divd-nl-3484 31 20 and and CC csirt-divd-nl-3484 31 21 sends send VBZ csirt-divd-nl-3484 31 22 out out RP csirt-divd-nl-3484 31 23 notifications notification NNS csirt-divd-nl-3484 31 24 to to IN csirt-divd-nl-3484 31 25 network network NN csirt-divd-nl-3484 31 26 owners owner NNS csirt-divd-nl-3484 31 27 07 07 CD csirt-divd-nl-3484 31 28 Jul Jul NNP csirt-divd-nl-3484 31 29 2021 2021 CD csirt-divd-nl-3484 31 30 Limited limited JJ csirt-divd-nl-3484 31 31 publication publication NN csirt-divd-nl-3484 31 32 ( ( -LRB- csirt-divd-nl-3484 31 33 after after IN csirt-divd-nl-3484 31 34 3 3 CD csirt-divd-nl-3484 31 35 months month NNS csirt-divd-nl-3484 31 36 ) ) -RRB- csirt-divd-nl-3484 31 37 . . . csirt-divd-nl-3484 32 1 More More JJR csirt-divd-nl-3484 32 2 information information NN csirt-divd-nl-3484 32 3 official official NN csirt-divd-nl-3484 32 4 advisory advisory NN csirt-divd-nl-3484 32 5 from from IN csirt-divd-nl-3484 32 6 Kaseya Kaseya NNP csirt-divd-nl-3484 32 7 DoublePulsar DoublePulsar NNP csirt-divd-nl-3484 32 8 blog blog NN csirt-divd-nl-3484 32 9 post post NN csirt-divd-nl-3484 32 10 Sophos Sophos NNP csirt-divd-nl-3484 32 11 blog blog NN csirt-divd-nl-3484 32 12 post post NN csirt-divd-nl-3484 32 13 CISA CISA NNP csirt-divd-nl-3484 32 14 - - HYPH csirt-divd-nl-3484 32 15 FBI FBI NNP csirt-divd-nl-3484 32 16 Guidance Guidance NNP csirt-divd-nl-3484 32 17 for for IN csirt-divd-nl-3484 32 18 MSPs MSPs NNPS csirt-divd-nl-3484 32 19 and and CC csirt-divd-nl-3484 32 20 their -PRON- PRP$ csirt-divd-nl-3484 32 21 Customers customer NNS csirt-divd-nl-3484 32 22 Affected affect VBN csirt-divd-nl-3484 32 23 by by IN csirt-divd-nl-3484 32 24 the the DT csirt-divd-nl-3484 32 25 Kaseya Kaseya NNP csirt-divd-nl-3484 32 26 VSA VSA NNP csirt-divd-nl-3484 32 27 Supply Supply NNP csirt-divd-nl-3484 32 28 - - HYPH csirt-divd-nl-3484 32 29 Chain Chain NNP csirt-divd-nl-3484 32 30 Ransomware Ransomware NNP csirt-divd-nl-3484 32 31 Attack Attack NNP csirt-divd-nl-3484 32 32   _SP csirt-divd-nl-3484 32 33 Twitter Twitter NNP csirt-divd-nl-3484 32 34   _SP csirt-divd-nl-3484 32 35 Facebook Facebook NNP csirt-divd-nl-3484 32 36   _SP csirt-divd-nl-3484 32 37 LinkedIn linkedin NN