Lock and Code
Lock and Code
Malwarebytes
“Seven or eight” zero-days: The failed race to fix Kaseya VSA, with Victor Gevers
43 minutes Posted Jul 19, 2021 at 5:05 am.
0:00
43:55
Download MP3
Show notes

On April 1, a volunteer researcher for the Dutch Institute for Vulnerability Disclosure (DIVD) began poking around into Kaseya VSA, a popular software tool used to remotely manage and monitor computers. Within minutes, he found a zero-day vulnerability that allowed remote code execution—a serious flaw. Within weeks, his team had found seven or eight more. 

In today's episode, DIVD Chair Victor Gevers describes the race to prevent one of the most devastating ransomware attacks in recent history. It's a race that Gevers and his team almost won. Almost.