Episode 220: Unpacking The Kaseya Attack And Securing Device Identities on the IoT

This podcast episode examines the Kaseya VSA supply-chain ransomware attack by the REvil (Pinchy Spider) group, describing how vulnerabilities in Kaseya were discovered by DIVD researchers but exploited by the adversary before patches were available, leading to ransomware distribution to hundreds of downstream MSP customers; the episode also covers the broader implications for software supply-chain security and mitigation steps such as patching, detection, and stronger device identities for IoT.