Page 4 of 7 for Blog

Vembu BDR Full Disclosure 25 August 2021, by Frank Breedijk

Full Disclosure on Vembu BDR vulnerabilities CVE-2021-26471, CVE-2021-26472 and CVE-2021-26473

Social media consolidation 20 August 2021, by Frank Breedijk

We are merging the DIVD and DIVD CSIRT social media accounts

Planned Vembu Full Disclosure 20 August 2021, by Frank Breedijk

The full details of 3 of the 4 Vembu vulnerabilities will be disclosed on 25 August 2021

Kaseya VSA Limited Disclosure 07 July 2021, by Frank Breedijk

A short retrospective on DIVD-2021-00002 - Kaseya VSA case

Kaseya Case Update 3 06 July 2021, by Lennaert Oudshoorn

Since the start of the incident last Friday, the number of Kaseya VSA instances that are reachable from the internet has dropped from over 2.200 to less than 70 in our last scan today.

Kaseya Case Update 2 04 July 2021, by Victor Gevers

During the last 48 hours, the number of Kaseya VSA instances that are reachable from the internet has dropped from over 2.200 to less than 140 in our last scan today. And, by working closely with our trusted partners and national CERTs, the number of servers in The Netherlands has dropped to zero. A good demonstration of how a cooperative network of security-minded organizations can be very effective during a nasty crisis.

Kaseya Case Update 03 July 2021, by Lennaert Oudshoorn

Yesterday an attack on Kaseya VSA led to a large ransomware spree, because DIVD was already investigating this kind of product and we were able to react quickly.

Kaseya VSA Advisory 02 July 2021, by Lennaert Oudshoorn

Users of on-premise Kaseya VSA are advised to disable their Kaseya VSA servers.

vCenter Server PreAuth RCE 06 June 2021, by Hidde Smit

A critical vulnerability has been found in VMware vCenter Server versions 3.x, 4.x, 6.5, 6.7 and 7.0.

Warehouse Botnet 03 June 2021, by Gerard Janssen

DIVD-researcher Tom Wolters vond een grote database met gebruikersnamen, wachtwoorden en authenticatie-cookies / DIVD researcher Tom Wolters has found a large database with usernames, passwords and authentication cookies