Page 14 - Pulse Secure News Today

Here's what else you need to know to Get Up to Speed and On with Your Day.

Get Permission The Cybersecurity and Infrastructure Security Agency is investigating whether five government agencies may have been breached when attackers exploited vulnerabilities in Pulse Connect Secure VPN products, according to a senior agency official. Earlier this month, researchers at the security firm FireEye published a report about attack groups attempting to exploit four Pulse Connect Secure vulnerabilities, including a zero-day flaw discovered in April thats now tracked as CVE-202...

The increased weaponization of zero-day vulnerabilities has resulted in unprecedented demand for FireEye’s threat intelligence and expertise, according to CEO Kevin Mandia. The Milpitas, Calif.-based platform security vendor blew the whistle on the SolarWinds hackers, alerting the world Dec. 8 that it had been hacked and determining days later that SolarWinds was the source of the compromise. Then just last week, FireEye publicly disclosed an authentication bypass zero-day flaw in Pulse Secur...

For at least the third time since the beginning of this year, the U.S. government is investigating a hack against federal agencies that began during the Trump administration but was only recently discovered, according to senior U.S. officials and private sector cyber defenders. It is the latest so-called supply chain cyberattack, highlighting how sophisticated, often government-backed groups are targeting vulnerable software built by third parties as a stepping-stone to sensitive government and...

The increased weaponization of zero-day vulnerabilities has resulted in unprecedented demand for FireEye’s threat intelligence and expertise, according to CEO Kevin Mandia.

minute read Share this article: SharePoint servers are being picked at with high-risk, legitimate-looking, branded phish messages and preyed on by a ransomware gang using an old bug. A phishing campaign, discovered by researchers at Cofense, is draping itself in a Microsoft Office SharePoint theme and successfully bypassing security email gateways (SEGs). In a post on Tuesday, the firm said that this is an example of why it’s not always prudent to share documents via Microsoft�...

A video posted on Israeli websites as part of a cyberattack, May 21, 2020 (Screen grab) The National Cyber Directorate warned Wednesday that coordinated attacks against Israel are expected next month to mark Iran’s annual Quds Day, and the end of the Muslim holy month of Ramadan. The actions, expected to come around May 7 and to be coordinated by anti-Israel hackers around the world under the banner “#OPJerusalem,” will seek to spread propaganda messages by way of website corruption, text...

Cyber Extortion Thriving Thanks to Accellion FTA Hits May 20, 2021 May 3, 2021 Compliance euroinfosec) • April 27, 2021     Average and median ransom payments per quarter, based on thousands of cases investigated (Source: Coveware) The zero-day attacks against Accellion File Transfer Appliance users have rewritten the rules of the cyber extortion game, adding a new supply chain trick to ransomware gangs arsenal that theyre sure to repeat. ...

By Justin Katz Apr 27, 2021 A Chinese hacking campaign is using known flaws in a virtual private network application to breach entity networks and implant the malware security researchers dubbed SUPERNOVA, the Cybersecurity and Infrastructure Security Agency said April 22. While similar to the recent attack attributed to Russian foreign intelligence, "CISA assesses this is a separate actor than the APT actor responsible for the SolarWinds supply chain compromise described in" previous alerts, a...

Reseller News Join Reseller News Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.Sign up now Businesses need to patch Pulse Secure VPNs Vulnerabilities in Pulse Connect Secure VPN software have reportedly been exploited by attackers, some believed linked to China, to compromise networks. Credit: Dreamstime Organisations using Pulse Secure’s mobile VPN should patch vulnerabilities reportedly being exploited in the...