Page 17 - Pulse Secure News Today

By Justin Katz   Hours after warning that government agencies have been affected by vulnerabilities found in a piece of virtual private networking software, the Cybersecurity and Infrastructure Security Agency issued its third emergency directive in five months to civilian federal agencies. The new directive instructs agencies to repeatedly run a tool on all devices using Pulse Connect Secure products that checks for issues associated with exploits allegedly being used by a hacking campaign w...

Suspected Chinese agents have been hacking US government agencies by exploiting a weakness in a VPN for months, report says wbostock@businessinsider.com (Bill Bostock) © Omar Marques/SOPA Images/LightRocket via Getty Images A VPN logo seen on a smartphone. Not related to this story. Omar Marques/SOPA Images/LightRocket via Getty Images The FireEye cybersecurity firm said Tuesday that Pulse Secure VPN had been compromised since June 2020. Researchers said "defense, government,...

By Justin Katz   The Cybersecurity and Infrastructure Security Agency on Tuesday confirmed that a number of federal agencies were compromised by a threat actor last year through vulnerabilities found in virtual private networking software made by Pulse Connect Secure. CISA "is aware of compromises affecting U.S. government agencies, critical infrastructure entities, and other private sector organizations by a cyber threat actor—or actors—beginning in June 2020 or earlier related vulnerabil...

Pulse Secure customers have been urged to take immediate steps to mitigate a critical zero-day vulnerability in the popular VPN platform, after researchers revealed multiple APT groups are targeting it. CVE-2021-22893 has a CVSS score of 10.0 and is listed as a critical authentication bypass vulnerability in Pulse Connect Secure. It’s being used in combination with multiple legacy CVEs in the product from 2019 and 2020 to compromise victims in defense, government, financial and other organiza...

The investigation is in its early stages but has turned up evidence that the intruders breached sensitive defense companies, according to a private security firm.

Get Permission A new zero-day vulnerability in Ivantis Pulse Connect Secure products is being combined with recently patched flaws to attack U.S. federal agencies. The U.S. Cybersecurity and Infrastructure Security Agency, Ivanti and FireEye report that U.S. federal agencies and other entities have been compromised by two attack groups. "Their primary goals are maintaining long-term access to networks, collecting credentials, and stealing proprietary data," says Charles Carmakal, senior vic...

According to FireEye researchers and VPN device manufacturer. At least two groups of hackers have spent months using a previously undisclosed vulnerability in American networking devices to spy on the US defence industry, researchers and the devices manufacturer said. Utah-based IT company Ivanti said in a statement that the hackers took advantage of the flaw in its Pulse Connect Secure suite of virtual private networking devices to break into the systems of "a very limited number of customers....

CISA Issues Deadline for Federal Agencies to Address Pulse Secure Vulnerabilities lucadp/iStock.com email April 21, 2021 01:08 PM ET The vulnerabilities led to the compromise of government agencies early last summer and, together with a newly disclosed flaw, continue to be exploited. Federal agencies have until 5 p.m. Eastern Standard Time April 23 to implement an emergency directive the Cybersecurity and Infrastructure Security Agency issued on vulnerabilities ...

Attackers Heavily Targeting VPN Vulnerabilities Threat actors like attacking the technology because they provide a convenient entry point to enterprise networks. Attacks on virtual private networks, like those this week targeting a trio of known vulnerabilities in Pulse Secure appliances, have intensified in recent months along with the increase in remote and hybrid work environments since the outbreak of COVID-19. The trend requires organizations to patch VPN and other externally facing devic...

Pulse Secure: Suspected Chinese hackers exploited VPN to compromise dozens of agencies and companies in US and Europe CNN 5 hrs ago © Michael Vi/Shutterstock Pulse Secure sign at headquarters of an American computer networking company For months, hackers with suspected ties to China have exploited a popular workplace tool to break into government agencies, defense companies and financial institutions in the US and Europe, according to a report by the cybersecurity firm FireEye. Popular S...