Exploit / PoCcritical
Chinese hackers used Pulse Secure VPN zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-22893 | Use-After-Free RCE in Ivanti Pulse Connect Secure License Services | 10.0 | 48% | KEVRansomware | KEV |
From the original article
2 min read at therecord.media
Two hacking groups, including at least one confirmed Chinese cyber-espionage outfit, have used a new zero-day vulnerability in Pulse Secure VPN equipment to gain a foothold inside the networks of US defense contractors and government organizations across the world. The attacks were discovered earlier this year by cybersecurity firm FireEye and confirmed by Pulse Secure today in coordinated press releases.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.