Veeam recently acknowledged a critical vulnerability (CVE-2024-40711) which can allow remote code execution. A patch has been released, so it is critical any impacted systems are updated as soon as possible. Veeam has not tested older unsupported versions but is assuming them to be vulnerable as well. Several high severity patches have also been released at the same time, so we recommend investigating these.
Recent Posts
-
Tegria Acquires CloudWave Strengthening Cybersecurity and Cloud Hosting Capabilities October 19, 2026 - LeadingAge Annual Meeting October 8, 2026
- 13th Annual AQORD Compliance Conference October 1, 2026
- A Pen Tester’s Perspective on Why Penetration Testing Matters September 24, 2026
- September 2026 edition of BlueOrange Connections September 23, 2026
Categories
Access Control arbitrary code authentication authentication bypass Breaches Change Healthcare Breaches CISA Cyberattack Cybersecurity Dirty Dozen Electronic Privacy Communications Act firewall healthcare cyber security Healthcare Network Cyberattack Healthcare Workers HIPAA HIPAA Audit HIPAA Compliance HIPAA Privacy Compliance HIPAA Security hipaa security risk assessment hipaa security risk assessment cyber security and complianc HIPAA Violations injection vulnerability lawsuit Long Term Care MFA network security NIST OCR OCR Investigations Office for Civil Rights password PHI Phishing Privacy regulatory compliance remote attacker risk riverspring living Security security update SRA unauthenticated attacker vulnerability