Kaseya Vsa Supply Chain Ransomware Attack

www.cisa.gov • November 10, 2026

Official websites use .gov A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS A lock ( Lock A locked padlock ) or https:// means you’ve safely connected to the .gov website. sensitive information only on official, secure websites.

CISA is taking action to understand and address the recent supply-chain ransomware attack against Kaseya VSA and the multiple managed service providers (MSPs) that employ VSA software. CISA encourages organizations to review the Kaseya advisory and immediately follow their guidance to shutdown VSA servers.

This product is provided subject to this Notification and this Privacy & Use policy.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Action1 Urges Endpoint Management Vendors to Address Zero-Day Vulnerabilities On November 10, 2026, Action1 called for collaboration among endpoint management and RMM vendors following the disclosure of over 30 zero-day vulnerabilities in N-able's N-central platform. These vulnerabilities could allow attackers to take control of customer endpoints if the management platform is compromised. Action1 introduced its Endpoint Takeover Prevention (ETP) architecture, which aims to prevent unauthorized actions on endpoints even if the management platform is breached. The initiative emphasizes the need for a collective industry response to enhance endpoint security, especially as AI accelerates vulnerability discovery. N-able has temporarily taken its hosted environments offline as a precaution, although it has not reported any active exploitation of the vulnerabilities. Action1's ETP requires cryptographic authorization for high-risk actions, limiting the potential damage from compromised platforms. 1 sources 43

Extracted Entities

Kaseya Vsa Supply Chain Ransomware Attack

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Countries (1)

MITRE ATT&CK (2)