Page 8 - Connect Secure News Today

Kinetic plans and pricing vary by location but the high speed and value potential is worth checking out.

An examination of OpenConnect, an open source software for corporate VPN.

We analyzed several enterprise VPNs and picked the most efficient ones for large companies.

Overview Pulse Connect Secure (PCS) gateway contains a buffer overflow vulnerability in Samba-related code that may allow an authenticated remote attacker to execute arbitrary code. Description CVE-2021-22908 PCS includes the ability to connect to Windows file shares (SMB). This capability is provided by a number of CGI scripts, which in turn use libraries and helper applications based on Samba 4.5.10. When specifying a long server name for some SMB...

minute read Share this article: One of the workaround XML files automatically deactivates protection from an earlier workaround: a potential path to older vulnerabilities being opened again. Pulse Secure has issued a workaround for a critical remote-code execution (RCE) vulnerability in its Pulse Connect Secure (PCS) VPNs that may allow an unauthenticated, remote attacker to execute code as a user with root privileges. Pulse Secure’s parent company, Ivanti, issued an out-of-band ...

By   Brad D. Williams on May 06, 2021 at 2:31 PM Substation at Idaho National Laboratory WASHINGTON: The NSA is spotlighting the importance of conducting risk-based security reviews of operational technologies (OT) across critical infrastructure, including defense. “A significant shift in how [OT] are viewed, evaluated, and secured within the US is needed to prevent malicious cyber actors from executing successful, and potentially damaging, cyber effects,” the guidance says. OT include ...

minute read Share this article: The security flaw tracked as CVE-2021-22893 is being used by at least two APTs likely linked to China, to attack U.S. defense targets among others. Pulse Secure has rushed a fix for a critical zero-day security vulnerability in its Connect Secure VPN devices, which has been exploited by nation-state actors to launch cyberattacks against U.S. defense, finance and government targets, as well as victims in Europe. Pulse Secure also patched three other ...

Threat actors are targeting one newly discovered and three previously known vulnerabilities in Pulse Connect Secure enterprise VPNs, according to a CISA emergency directive and alert, as well as blog posts by FireEye and Ivanti. "There is no indication the identified backdoors were introduced through a supply chain compromise of the companys network or software deployment process," FireEye noted. By   Brad D. Williams on April 20, 2021 at 9:00 PM

Get Permission A new zero-day vulnerability in Ivantis Pulse Connect Secure products is being combined with recently patched flaws to attack U.S. federal agencies. The U.S. Cybersecurity and Infrastructure Security Agency, Ivanti and FireEye report that U.S. federal agencies and other entities have been compromised by two attack groups. "Their primary goals are maintaining long-term access to networks, collecting credentials, and stealing proprietary data," says Charles Carmakal, senior vic...