CISA breached a federal agency as part of its red team program - and nobody noticed for five months

The program SILENTSHIELD involved a red team simulating nation-state threat actors, revealing poor security posture like inadequate firewalling and lack of EDR alert analysis.

Exploiting an unpatched web server and a phishing attack helped the red team compromise the organization's domain, gaining access to tier zero assets and external networks.

Read at ITPro