China-linked hackers used Pulse Secure flaw to target U.S. defense industry

Discussion in 'other security issues & news' started by hawki, Apr 20, 2021.

  1. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,078
    Location:
    DC Metro Area
    "At least two groups of China-linked hackers have spent months using a previously undisclosed vulnerability in American networking devices to spy on the U.S. defense industry...

    Utah-based IT company Ivanti said in a statement that the hackers took advantage of the flaw in its Pulse Connect Secure suite of virtual private networking devices to break into the systems...

    Ivanti said that while there were mitigations in place a fix for the issue would not be available until early May..."

    https://www.reuters.com/technology/...e-flaw-target-us-defense-industry-2021-04-20/
     
  2. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,078
    Location:
    DC Metro Area
    "Critical entities targeted in suspected state-backed Chinese cyber spying...

    The hack of Pulse Connect Secure networking devices came to light in April, but its scope is only now starting to become clear. The Associated Press has learned that the hackers targeted telecommunications giant Verizon and the country's largest water agency [the Metropolitan Water District of Southern California]...

    Security researchers say dozens of other high-value entities that have not yet been named were also targeted as part of the breach of Pulse Secure, which is used by many companies and governments for secure remote access to their networks..."

    https://www.business-standard.com/a...cked-chinese-cyber-spying-121061500340_1.html
     
  3. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    When are these industry giants AND especially Defense Industry going to steer clear of common network interconnectivity which is chalked full of avenues of open opportunity, and cannot be anything else, and never 100% secure.

    Apparently the importance and priority of such systems isn't of any interest to them.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.