SC Magazine

APRIL 20, 2021

While specific companies were not named, defense contractors were among those targeted as part of a campaign by at least two hacking groups that leveraged vulnerabilities Pulse Secure VPN devices. Mandiant outlined 12 malware families that they observed actively exploiting vulnerabilities in Pulse Secure VPN devices dating back to last year.

Government 104

Government VPN Malware Software 104

NopSec

JANUARY 31, 2024

This exploit will certainly be chained with other vulnerabilities and post exploitation methods that require SYSTEM privileges. Successful exploitation requires that an attacker already have a foothold on a system, which implies the ability to execute commands. We encourage everyone to read the full blog at SecureLayer7.

VPN 59

VPN Government Risk Hacking 59

SecureList

NOVEMBER 14, 2022

We polled our experts from the GReAT team and have gathered a small number of key insights about what APT actors are likely to focus on in 2023. Although 2022 did not feature any mobile intrusion story on the scale of the Pegasus scandal, a number of 0-days have still been exploited in the wild by threat actors.

Firmware 106

Firmware Surveillance Mobile Telecommunications 106