Security feed

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system. CISA requi…

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. CISA required action: Apply updates per vendor instructions.

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. CISA required action: The impacted product is end-of-life…