Security News > 2020 > October > The seven deadly sins letting hackers hijack America's govt networks: These unpatched bugs leave systems open

If you're wondering which bugs in particular miscreants are exploiting to break into, or attempt to break into, US government networks, wonder no more.

"CISA is aware of multiple cases where the Fortinet FortiOS SSL VPN vulnerability CVE-2018-13379 has been exploited to gain access to networks," explained Homeland Security's Cybersecurity and Infrastructure Security Agency in its advisory.

"To a lesser extent, CISA has also observed threat actors exploiting the MobileIron vulnerability CVE-2020-15505. While these exploits have been observed recently, this activity is ongoing and still unfolding. After gaining initial access, the actors exploit CVE-2020-1472 to compromise all Active Directory identity services."

The agency said systems run by government organizations, great and small, have been targeted as well as private networks: "This recent malicious activity has often, but not exclusively, been directed at federal and state, local, tribal, and territorial government networks."

The advice today is to address the above seven flaws - the fixes have been available for a long while - assume you've already been compromised and work from there, reset account credentials if ZeroLogon has been exploited, and more.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/10/12/cisa_fbi_warning/