Skip to main content
Answer

What is the plan to address the Cuba Ransomware exploit?

  • August 23, 2023
  • 6 comments
  • 213 views

bp4JC
Forum|alt.badge.img+3

What is Veeam’s plan to address the newly discovered Cuba Ransomware exploit? Is there a patch forthcoming soon?

 

https://www.bleepingcomputer.com/news/security/cuba-ransomware-uses-veeam-exploit-against-critical-us-organizations/

Best answer by coolsport00

Hi @bp4JC - Veeam already has a patch out, since March. @Rick Vanover reminded folks to update their environments yesterday. See here

6 comments

coolsport00
Forum|alt.badge.img+21
  • Veeam Legend
  • Answer
  • August 23, 2023

Hi @bp4JC - Veeam already has a patch out, since March. @Rick Vanover reminded folks to update their environments yesterday. See here


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • August 23, 2023

Check here in the Cyber Security space as it was covered there - https://community.veeam.com/cyber-security-space-95/veeam-exploit-used-against-critical-us-orgs-5455

The exploit is RDP not Veeam specific and the March patch for Veeam covered this.


dips
Forum|alt.badge.img+7
  • On the path to Greatness
  • August 23, 2023

Not much more to add as @coolsport00 and @Chris.Childerhose have already provided info. 

Ensure you have an offsite backup that is offline (as appropriate), make use of immutable storage and test backups regularly to ensure RTOs and RPOs are being met just in case the worst happens. 


 

 


Iams3le
Forum|alt.badge.img+11
  • Veeam Legend
  • August 24, 2023

Hi @bp4JC - Veeam already has a patch out, since March. @Rick Vanover reminded folks to update their environments yesterday. See here

Precise and thorough answer! Cheers...


Rick Vanover
Forum|alt.badge.img+10
  • RICKATRON
  • August 24, 2023

You beat me to my own post @coolsport00 → The update has been out for a while, and I’m super happy Veeam ONE VID caught it too.


coolsport00
Forum|alt.badge.img+21
  • Veeam Legend
  • August 24, 2023

😉