Page 3 - Microsoft Exchange Hack News Today : Breaking News, Live Updates & Top Stories | Vimarsana

By   Brad D. Williams on May 03, 2021 at 4:06 PM WASHINGTON: Pulse Connect Secure today released a security patch for its virtual private network (VPN) product that is widely used by federal agencies, critical infrastructure operators, and the defense industrial base. The VPN allows the federal workforce to access enterprise networks from remote locations. Ivanti, the parent company of the VPN developer, said it worked with CISA and other entities to address the zero-day vulnerability originally disclosed just weeks ago. This vulnerability is one of four that are being actively exploited i...

By   Brad D. Williams on May 03, 2021 at 4:38 PM WASHINGTON: Once considered by many to be merely a cyber buzzword, zero-trust security models are all the rage today. Ever since the NSA urged the defense sector to adopt zero trust, it’s been a topic top of mind for security pros, from keynotes to happy hours. Zero trust, as a concept, existed even before the term, which is a decade old now. But with remote workforces and evolving IT environments, threat actors, and cyberattacks, many believe zero trust’s time has finally come. “I think [zero-trust security] was slowly building over...

By   Brad D. Williams on April 27, 2021 at 4:07 PM WASHINGTON: The powerful chairman of the Senate Intelligence Committee said today a bill that will likely include “mandatory reporting” on cyber incidents and public-private cyber threat intelligence sharing is in the works. Sen. Mark Warner was clear in his speech to the US Chamber of Commerce that there’s a “recognition that our current system is not working.” For example, if the bad guys had wanted the SolarWinds campaign to be something other than cyberespionage, Warner said, then we could have seen a “crushing” result. T...

Threat actors are targeting one newly discovered and three previously known vulnerabilities in Pulse Connect Secure enterprise VPNs, according to a CISA emergency directive and alert, as well as blog posts by FireEye and Ivanti. "There is no indication the identified backdoors were introduced through a supply chain compromise of the company's network or software deployment process," FireEye noted. By   Brad D. Williams on April 20, 2021 at 9:00 PM

By   Brad D. Williams on April 14, 2021 at 2:02 PM Microsoft Exchange logo WASHINGTON: The FBI carried out a “court-authorized operation” in recent days to remove web shells from hundreds of US computers running Microsoft Exchange server software, the Department of Justice announced as it unsealed a search warrant that permitted the operation. “The FBI is attempting to provide notice of the court-authorized operation to all owners or operators of the computers from which it removed the hacking group’s web shells,” the DoJ said. Web shells are malicious scripts uploaded to servers...