4 ms·
The Microsoft team at a company I used to work for tried to push this very software out onto all staff machines. Our Platform Engineering team managed to push
by smcleod 5y ago
The Microsoft team at a company I used to work for tried to push this very software out onto all staff machines.
Our Platform Engineering team managed to push back on it based on the grounds that it was a serious security concern and is essentially an "enterprise" backdoor.
The following year the bulk of our team decided to resign move on to other employment - I was told Kaseya was rolled out to all machines shortly after.
Companies need to ensure that risks raised by senior engineering teams are taken into account before deploying company wide software.
- raverbashing 5y agoAh but things like "security feel good feelings", being "in the cloud" and kickbacks are more important for the higher-ups in certain companies. And of course, it's hard to believe the (upstream) companies responsible for these weak security practices will suffer any consequences
- lostmsu 5y agoWhat software are you referring to? The article only mentions "VSA tool", and that does not ddg well.
- hoppyhoppy2 5y agoThe article links to https://us-cert.cisa.gov/ncas/current-activity/2021/07/02/kaseya-vsa-supply-chain-ransomware-attack https://us-cert.cisa.gov/ncas/current-activity/2021/07/02/ka... , which says it was Kaseya VSA and links to their advisory.
- deleted 5y ago[deleted]
- chillwaves 5y agoVSA appears to be a proprietary name. They are usually referred to as RMM tools (remote monitoring and management). They essentially are enterprise level back doors with good intentions. Think firewall/antivirus/backup software suite run by a remote team.