The Health Sector Cybersecurity Coordination Center issued a new alert warning of the vulnerabilities in the popular data backup software Veeam Backup & Replication.
Veeam Backup & Replication can be used to protect and restore files in Microsoft Exchange and SharePoint. Ransomware group FIN7 has exploited the vulnerability for at least one attack, according to the May 10 HC3 alert.
In March, Veeam addressed the issue and provided workaround instructions for customers. However, later in the month, a cybersecurity testing company showed how it could still be exploited.
The agency is urging hospitals to remain alert and upgrade any old Veeam software.
Read the full threat alert here.