42: Hey Ya Kaseya: MSPs as unwitting attackers

Kaseya, Kaseya, Kaseya... How could we release an episode this week WITHOUT talking about the calamity at Kaseya?

If you hadn't heard, the ransomware gang REvil has leveraged a vulnerability in Kaseya's VSA software against multiple MSPs and their clients. Oh dear. So what is it? Bog standard ransomware? Supply chain compromise? Zero-day exploit? It's all a bit murky, so Kev gets his 'Cyberattacks for Dummies' hat on.

Also featured is the news that audio-editing software Audacity has been accused of being 'possible spyware'.

***

https://www.youtube.com/watch?v=XfAyutRfy2A

https://www.bbc.co.uk/news/technology-57721967

https://www.proofpoint.com/us/blog/threat-insight/bazaflix-bazaloader-fakes-movie-streaming-service