Kaseya has released a security update for the VSA zero-day vulnerabilities used by the REvil ransomware gang to attack MSPs and their customers. VSA is a remote management and monitoring solution commonly used by managed service providers. The Dutch Institute for Vulnerability Disclosure (DIVD) disclosed seven vulnerabilities in April. The vulnerabilities were used to launch a massive attack on July 2nd against approximately 60 MSPS using on-premise VSA servers and 1,500 business customers.
Source: https://www.bleepingcomputer.com/news/security/kaseya-patches-vsa-vulnerabilities-used-in-revil-ransomware-attack/