CISA Warns Patched Pulse Secure VPNs Could Still Expose Organizations to Hackers

In Hacker News by Blog Writer

Post Sharing
The United States Cybersecurity and Infrastructure Security Agency (CISA) yesterday issued a fresh advisory alerting organizations to change all their Active Directory credentials as a defense against cyberattacks trying to leverage a known remote code execution (RCE) vulnerability in Pulse Secure VPN servers—even if they have already patched it.

The warning comes three months after another