US firm hacked to spread ransomware had previous security flaws

Nearly all of Kaseya’s security problems have as their root cause well-understood coding vulnerabilities that should have been addressed earlier, said Moussouris. — AP

For 21 years, the software company Kaseya laboured in relative obscurity – at least until cybercriminals exploited it in early July for a massive ransomware attack that snarled businesses around the world and escalated US-Russia diplomatic tensions.

But it turns out that the recent hack wasn’t the first major cybersecurity problem to hit the Miami-based company and its core product, which IT teams use to remotely monitor and administer workplace computer systems and other devices.