That Pulse Secure VPN you're using to protect your data? Better get it patched – or it's going to be ransomware time

Re: Yeah but...

If the users don't patch when they're informed then such a term would be essential. After all those users are responsible. Even the one in the twitter thread, assuming they're still with the same MSP.

The Pulse Secure response can be summarised as "You can lead a horse to whater but some of them are mules." That's the problem.

Re: Yeah but...

You're wrong, and they also patched this more than 8 months ago. I also don't know of any corporate vpn hardware/software provider that's had 0 bugs of this severity.

Re: Yeah but...

They do have a EULA that states that they aren't liable for a breach, more or less. It's the same standard legal boilerplate that everyone else uses in that regard.

I'm assuming you mean this:

https://support.pulsesecure.net/product-service-policies/eula/

However, they *do* send out notifications about updates to companies that have support agreements in place with them for upgrades; It's still on the company that purchased the product to download and install said updates.

The beef I have with them is that you *must* have an active support contract to download updates, even critical ones like the one mentioned in the article.

Re: Travelex TITSUP

Based on other points noted on Twitter and elsewhere about the Travelex malware outbreak, everything was out of date and unpatched.

It may take a little effort to determine who got there first, whether they have only been compromised once and whether the actions Travelex are taking are making the problem better or worse. Based on other malware/ransomware, sometimes the recovery steps rapidly increase the problems until you realise you are part of the problem and get in a third party to do things properly....

Re: Useful info

Only if the ransom crew are script kiddies working from home, most likely it will lead to a daisy chain of other compromised systems in 3rd party countries that do not log their connections (because they're compromised!). If each chain is used only once for a short time then the trail will just stop dead unless you're capable of hacking through these systems quickly enough (breaking lots of laws on the way) to reach the source.