SolarWinds and Kaseya were likely targeted not only because of their large and influential customer bases, but also because of their respective technologies' access to enterprise networks, whether it was managing IT, operational technology (OT), or internet of things (IoT) devices. In both cases, tens of thousands of customers installed compromised updates, and the trust both vendors built with customers was damaged. In each case, alleged state actors were able to infiltrate the mechanisms used by the vendors to ship software updates to customers, and infect those updates with malware, including ransomware. The SolarWinds and Kaseya attacks were well-documented and devastating intrusions at the heart of IT and network management supply chains. Network management systems are attractive targets because of their oversight of core servers and critical network components. Team82 was able to chain vulnerabilities to gain remote code execution with root privileges, as well as privilege escalation, credential theft, and more. Team82 privately disclosed 11 vulnerabilities in key Nagios components, all of which were fixed in updates released in August. Claroty Team82's latest research focuses on network management systems, starting with Nagios, one of the most popular in the world used by thousands of organizations.

Nagios xi license key