Hackers Are Exploiting a Pulse Secure 0-Day to Breach Orgs Around the World
upstart writes in with an IRC submission:
Hackers are exploiting a Pulse Secure 0-day to breach orgs around the world:
Hackers backed by nation-states are exploiting critical vulnerabilities in the Pulse Secure VPN to bypass two-factor authentication protections and gain stealthy access to networks belonging to a raft of organizations in the US Defense industry and elsewhere, researchers said.
At least one of the security flaws is a zero-day, meaning it was unknown to Pulse Secure developers and most of the research world when hackers began actively exploiting it, security firm Mandiant said in a blog post published Tuesday. Besides CVE-2021-22893, as the zero-day is tracked, multiple hacking groups-at least one of which likely works on behalf of the Chinese government-are also exploiting several Pulse Secure vulnerabilities fixed in 2019 and 2020.
[...] Multiple intrusions over the past six months have hit defense, government, and financial organizations around the world, Tuesday's post reported. Separately, the US Cybersecurity and Infrastructure Security Agency said that targets also include US government agencies, critical infrastructure entities, and other private sector organizations."
Read more of this story at SoylentNews.