Sign In

Communications of the ACM

ACM TechNews

Multiple Agencies Breached by Hackers Using Pulse Secure Vulnerabilities


View as: Print Mobile App Share: Send by email Share on reddit Share on StumbleUpon Share on Hacker News Share on Tweeter Share on Facebook
Logo of the U.S. Cybersecurity & Infrastructure Security Agency.

Hackers breached multiple government agencies and other critical organizations by exploiting vulnerabilities in products from a Utah-based software company, according to federal authorities.

Credit: CISA

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said hackers had infiltrated federal agencies and other critical organizations by exploiting flaws in products from Utah-based software company Ivanti Pulse Connect Secure (PCS).

The CISA alert followed cybersecurity group FireEye's Mandiant Solutions' publication of a blog post attributing some breaches to a Chinese state-sponsored hacking group and another Chinese advanced persistent threat group.

CISA said hackers had installed webshells in PCS products, which enabled them to circumvent security features.

The agency said Ivanti was developing a patch, adding that it "strongly encouraged" all users to update to the latest version of the software and to look for signs of breaches.

CISA issued an emergency directive requiring all federal agencies evaluate how many PCS products they and third-party organizations used, and to update them by April 23.

From The Hill
View Full Article

 

Abstracts Copyright © 2021 SmithBucklin, Washington, DC, USA


 

No entries found