The New OilHow #PrivateEquity #Debt Left a Leading #VPN Open to Chinese Hackers
Kevin DartyCISA tags critical Ivanti EPM flaws as actively exploited in attacks
#Security #Cybersecurity #CISA #VPN #Networking #Ivanti #PulseSecure #Vulnerability #Breach #ZeroDay
Stephen MurcottMycology and defending against threats and vulnerability of mycelium is similar to Cyber in many ways. The devil is in the details... #Fortinet I feel vindicated for hand crafted bare metal Linux firewalls where I was in control of patches, scheduled jobs, iptables, htb, live monitoring, software updates and version controls... Shocked at how badly some device life cycles have been managed. #PulseSecure #Cisco make so much work. We pay for this trust in vendors more interested in profit than security.
Maxime ThiebautWe're still discovering further ramifications to #Ivanti's #PulseSecure vulnerabilities (#CVE_2023_46805 & #CVE_2024_21887). In February, we identified two new backdoors: #SparkCockpit & #SparkTar. Both backdoors employ selective interception of TLS communication, offer multiple degrees of persistence and access possibilities into the victim network (e.g., traffic tunneling through SOCKS proxy).
👀 Analysis & detection rules at https://blog.nviso.eu/2024/03/01/covert-tls-n-day-backdoors-sparkcockpit-sparktar/
The findings of our investigation have been independently corroborated by the research performed by Mandiant and have partially been observed by Fortinet.
[ENC]BladeXPMein ehemals liebster Arbeitgeber wurde ja 2021 von eine Konzern geschluckt. 💔
Es war dem Konzern sehr wichtig das man unbedingt das gute #openvpn durch #ivanti bzw. damals noch #pulsesecure ersetzt. Bedenken waren egal, denn es ging ja um Compliance, nicht um Security.
Auch Hinweise auf die CVE Sammlung von Ivanti haben nicht zum umdenken angeregt. "Works for >100k" war eine relevantere Metrik als diverse CVSS > 8.0. 🤷
Ivanti sammelt CVEs wie andere Pokemon.
Konzerne: 😍
Security: 🙈
Lisa Lorenzin (she/her)True facts. AFAICT, the #Ivanti mess is technical-debt chickens coming home to roost. I was at #NetScreen when we acquired #Neoteris (originators of the #SSLVPN product), and then over the next two decades #Juniper > #PulseSecure > #Ivanti have tortured that legacy codebase with everything from FrankenNAC to PE-driven developer offshoring to bolt-on cloud-service offerings. TBH the only thing that surprises me about this is that it took so long.
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago...
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago...
heise online (inoffiziell)Mindestens zwei Gruppen attackieren Pulse Secure VPN-Appliances über eine bislang unbekannte Sicherheitslücke. Patches gibt es bislang keine.
Kritische 0-Day-Lücke in Pulse Secure VPN aktiv ausgenutzt
🖱🛠👉👕👈 SOSOrdinet 🎣🖥️🐛 🗞️#VPN #Fortinet : 3 vulnérabilités dont #Zerologon et #PulseSecure permettent de collecter 49 577 IPs !
#VPN #PulseSecure : le stockage et le chiffrement des mots de passe étaient accessibles depuis le registre #Windows !
Élections présidentielles américaines : intensification des #cyberattaques depuis des failles nouvelles et existantes relatives aux #VPN !
#securite #Elections2020 #Zerologon #Citrix #MDM #PulseSecure
