China-linked hackers used Pulse Secure flaw to target U.S. defense industry - researchers
By Raphael Satter and Christopher Bing
Reuters
WASHINGTON (Reuters) -At least two groups of China-linked hackers have spent months using a previously undisclosed vulnerability in American networking devices to spy on the U.S. defense industry, researchers and the devices manufacturer said Tuesday.
Utah-based IT company Ivanti said https://blog.pulsesecure.net/pulse-connect-secure-security-update in a statement that the hackers took advantage of the flaw in its Pulse Connect Secure suite of virtual private networking devices to break into the systems of a very limited number of customers.
By Syndicated Content
By Raphael Satter and Christopher Bing
WASHINGTON (Reuters) - At least two groups of China-linked hackers have spent months using a previously undisclosed vulnerability in American networking devices to spy on the U.S. defense industry, researchers and the devices manufacturer said Tuesday.
Utah-based IT company Ivanti said in a statement that the hackers took advantage of the flaw in its Pulse Connect Secure suite of virtual private networking devices to break into the systems of a very limited number of customers.
Ivanti said https://kb.pulsesecure.net/pkb mobile#article/l:en US/SA44784/s that while it was taking steps to mitigate the compromises a fix for the issue would not be available until early May.
Suspected Chinese hackers exploited Pulse Secure VPN to compromise dozens of agencies and companies in US and Europe kvia.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from kvia.com Daily Mail and Mail on Sunday newspapers.
IT software firm Ivanti, which acquired Pulse Secure late last year, today confirmed attackers have targeted a limited number of customers using Pulse Connect Secure (PCS) appliances. It has been working with Mandiant, the Cybersecurity and Infrastructure Security Agency (CISA), and others to respond to the exploits, which target three known vulnerabilities and a zero-day.
The three known flaws include CVE-2020-8243, CVE-2020-8260, and CVE-2019-11510, which CISA recently warned is among several CVEs under attack by the Russian Foreign Intelligence Service (SVR) in its efforts to target US and allied networks, including national security and government systems. All of these vulnerabilities were patched in 2019 and 2020, Ivanti says.