Threat Source newsletter (July 15, 2021)

Summary: Cisco Talos reported that Microsoft's July Patch Tuesday disclosed 117 vulnerabilities, including a fix for the PrintNightmare print spooler flaw that allows remote code execution and CVE-2021-34448, a Scripting Engine memory corruption issue attackers have exploited in the wild. Kaseya released a patch for its VSA remote monitoring software, exploited in a supply chain attack tied to ransomware, while REvil demanded a $70 million ransom for a universal decryption key and SaaS customers were still advised to shut down affected servers.
Key Takeaway: REvil's $70 million demand for a universal decryption key shows ransomware actors pricing recovery across hundreds of victim organizations at once, and the Kaseya patch covers only on-premise customers, leaving SaaS users with shutdown as their interim control.

Read the original at Cisco Talos ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2021-34448
Related: CVE-2021-34448: Microsoft Windows Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Microsoft Patch Tuesday for July 2021 — Snort rules and prominent vulnerabilities Cyber Risks ·
Microsoft Patch Tuesday, July 2021 Edition Cyber Risks ·