CISA issues emergency directive for federal agencies to patch Ivanti VPN vulnerabilities
Briefly

"At this point, we are investigating the potential targeting of agencies but have not confirmed any compromises," Eric Goldstein, executive assistant director for cybersecurity at CISA, said during a media call Friday.
"What we and industry have seen so far is actors deploying web shells, which, of course, are snippets of code that enable the actor to maintain some persistence on the device and use it later to do any number of activities," Goldstein said.
Read at CyberScoop
[
add
]
[
|
|
]