Patch Now, Says CISA
Attackers are exploiting a zero-day flaw in Ivanti Connect Secure VPN appliances to steal credentials, and one firm's honeypots logged 105 attack attempts.
Key terms
AP Cybersecurity alignment
- 2.1.C.6In the taking-action phase of an attack, adversaries act on their objectives by collecting targeted data, exfiltrating it, and disrupting services or destroying data.Learning objective: Describe the phases of a cyberattack.
- 2.1.C.7In the final phase of an attack, many adversaries try to evade detection by removing or editing log files and erasing other files they may have planted on devices (e.g., malware).Learning objective: Describe the phases of a cyberattack.
- 4.3.C.2Ensuring that a computer’s operating system and software applications are updated to the most recent version prevents adversaries from taking advantage of a known vulnerability.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
AP Networking alignment
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.6.B.2Monitoring and alerting tools help ensure availability by enabling rapid detection of failures or suspicious activity.Learning objective: Identify ways to improve the reliability and availability of networked systems.
- 4.6.B.4Applying and documenting software updates and patches reduces the risk of failure and reduces recovery time if an outage occurs.Learning objective: Identify ways to improve the reliability and availability of networked systems.