As Sophos X-Ops incident responders revealed last month, an RCE flaw (CVE-2024-40711) in Veeam's Backup & Replication (VBR) software disclosed in September is now exploited to deploy Frag ransomware.

Acronis and Veeam unlawfully leverage Symantec patented technologies in their respective backup and replication ... which is related to storing computer disk images in an imaged partition ...