Get the latest tech news
NSA says it’s tracking Ivanti cyberattacks as hackers hit US defense sector
The US intelligence agency confirms hackers exploiting flaws in Ivanti's VPN appliance have targeted organizations across the defense sector
NSA spokesperson Edward Bennett confirmed in an emailed statement to TechCrunch on Friday that the U.S. intelligence agency, along with its interagency counterparts, is “tracking and aware of the broad impact from the recent exploitation of Ivanti products, to include of the [sic] U.S defense sector.” Confirmation that the NSA is tracking these cyberattacks comes days after Mandiant reported that suspected Chinese espionage hackers have made “mass attempts” to exploit multiple vulnerabilities impacting Ivanti Connect Secure, the popular remote access VPN software used by thousands of corporations and large organizations worldwide. This was echoed in an advisory released by U.S. cybersecurity agency CISA on Thursday, which warned that hackers exploiting vulnerable Ivanti VPN appliances may be able to maintain root-level persistence even after performing factory resets.
Or read this on TechCrunch