Page 33 - Pulse Secure News Today : Breaking News, Live Updates & Top Stories | Vimarsana

By Justin Katz   Hours after warning that government agencies have been affected by vulnerabilities found in a piece of virtual private networking software, the Cybersecurity and Infrastructure Security Agency issued its third emergency directive in five months to civilian federal agencies. The new directive instructs agencies to repeatedly run a tool on all devices using Pulse Connect Secure products that checks for issues associated with exploits allegedly being used by a hacking campaign with links to the Chinese government. If the tool does not detect an issue, agencies should continue...

Suspected Chinese agents have been hacking US government agencies by exploiting a weakness in a VPN for months, report says wbostock@businessinsider.com (Bill Bostock) © Omar Marques/SOPA Images/LightRocket via Getty Images A VPN logo seen on a smartphone. Not related to this story. Omar Marques/SOPA Images/LightRocket via Getty Images The FireEye cybersecurity firm said Tuesday that Pulse Secure VPN had been compromised since June 2020. Researchers said "defense, government, and financial organizations around the world" were affected. FireEye said it suspects the Chinese g...

By Justin Katz   The Cybersecurity and Infrastructure Security Agency on Tuesday confirmed that a number of federal agencies were compromised by a threat actor last year through vulnerabilities found in virtual private networking software made by Pulse Connect Secure. CISA "is aware of compromises affecting U.S. government agencies, critical infrastructure entities, and other private sector organizations by a cyber threat actor—or actors—beginning in June 2020 or earlier related vulnerabilities in certain Ivanti Pulse Connect Secure products," according to an April 20 advisory. "Since Ma...

Pulse Secure customers have been urged to take immediate steps to mitigate a critical zero-day vulnerability in the popular VPN platform, after researchers revealed multiple APT groups are targeting it. CVE-2021-22893 has a CVSS score of 10.0 and is listed as a critical authentication bypass vulnerability in Pulse Connect Secure. It’s being used in combination with multiple legacy CVEs in the product from 2019 and 2020 to compromise victims in defense, government, financial and other organizations around the world, according to Mandiant. “Mandiant is currently tracking 12 malware families...

The investigation is in its early stages but has turned up evidence that the intruders breached sensitive defense companies, according to a private security firm.