Latest Veeam news

Exploit for Veeam Recovery Orchestrator auth bypass available, patch now

A proof-of-concept (PoC) exploit for a critical Veeam Recovery Orchestrator authentication bypass vulnerability tracked as CVE-2024-29855 has been released, elevating the risk of being exploited in attacks.
- Bill Toulas
- June 13, 2024
- 01:21 PM
- 0
Exploit for critical Veeam auth bypass available, patch now

A proof-of-concept (PoC) exploit for a Veeam Backup Enterprise Manager authentication bypass flaw tracked as CVE-2024-29849 is now publicly available, making it urgent that admins apply the latest security updates.
- Bill Toulas
- June 10, 2024
- 11:05 AM
- 0
Veeam warns of critical Backup Enterprise Manager auth bypass bug

Veeam warned customers today to patch a critical security vulnerability that allows unauthenticated attackers to sign into any account via the Veeam Backup Enterprise Manager (VBEM).
- Sergiu Gatlan
- May 21, 2024
- 06:24 PM
- 0
Veeam warns of critical bugs in Veeam ONE monitoring platform

Veeam released hotfixes today to address four vulnerabilities in the company's Veeam ONE IT infrastructure monitoring and analytics platform, two of them critical.
- Sergiu Gatlan
- November 06, 2023
- 04:58 PM
- 0
Cuba ransomware uses Veeam exploit against critical U.S. organizations

The Cuba ransomware gang was observed in attacks targeting critical infrastructure organizations in the United States and IT firms in Latin America, using a combination of old and new tools.
- Bill Toulas
- August 20, 2023
- 10:15 AM
- 1
Hackers target vulnerable Veeam backup servers exposed online

Veeam backup servers are being targeted by at least one group of threat actors known to work with multiple high-profile ransomware gangs.
- Bill Toulas
- April 29, 2023
- 10:41 AM
- 1
Exploit released for Veeam bug allowing cleartext credential theft

Cross-platform exploit code is now available for a high-severity Backup Service vulnerability impacting Veeam's Backup & Replication (VBR) software.
- Sergiu Gatlan
- March 23, 2023
- 12:18 PM
- 2
Veeam fixes bug that lets hackers breach backup infrastructure

Veeam urged customers to patch a high-severity Backup Service security vulnerability impacting its Backup & Replication software.
- Sergiu Gatlan
- March 08, 2023
- 01:13 PM
- 0
RomCom RAT malware campaign impersonates KeePass, SolarWinds NPM, Veeam

The threat actor behind the RomCom RAT (remote access trojan) has refreshed its attack vector and is now abusing well-known software brands for distribution.
- Bill Toulas
- November 03, 2022
- 03:36 PM
- 0
BlackCat ransomware’s data exfiltration tool gets an upgrade

The BlackCat ransomware (aka ALPHV) isn't showing any signs of slowing down, and the latest example of its evolution is a new version of the gang's data exfiltration tool used for double-extortion attacks.
- Bill Toulas
- September 22, 2022
- 06:00 AM
- 0