As of today, the situation has stabilized. The emergency phase is complete, and we are moving on to a detailed analysis of what happened. We would like to share the next steps.
Full disclosure of the technical details is premature at this time. Stabilization of the situation does not mean that all procedures are complete: public channels are accessible not only to our clients, and details disclosed before all necessary measures are completed could create additional risks.
Within the next few days, we will officially publish the results of the incident investigation. We will explain what the vulnerability was, how it was exploited, and what measures we have taken.
What can be said right now: the incident is related to a vulnerability in one of the VMmanager 6 builds. Security updates have been released, and subsequent ones will further increase the product's resilience to such vulnerabilities. Recommendations for securing the perimeter have been published and are being supplemented as needed. Technical support is operating in enhanced mode and is assisting with each specific installation.
Please write to us if you have any additional questions. We are always in touch and encourage users to contact technical support.
