CISA is investigating at least five federal agencies that may have been breached by hackers exploiting vulnerabilities in Pulse Connect Secure VPN applications. The flaw was discovered and publicized by security firm FireEye in April. CISA issued a directive to federal agencies to use Pulse Secure’s tools to check for signs of suspicious activity; at least five came up positive. The attack has not been positively attributed, but FireEye has identified two threat groups, one of which may have ties to China. A total of 24 federal agencies use these virtual private network appliances.
Sources:
- Breaking Defense: CISA Investigates Possible Hacks of Federal Agencies
- Healthcare Info Security: CISA: 5 Agencies Using Pulse Secure VPNs Possibly Breached