Outdated Vulnerability Exploited by Multiple Hacker Groups to Breach US Federal Agency.
TL;DR
Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal entity in the U.S. The vulnerability, tracked as CVE-2019-18935, relates to a .NET deserialization vulnerability affecting Progress Telerik UI for ASP.NET AJAX that, if left unpatched, could lead to remote code execution. Organizations are recommended to upgrade their instances of Telerik UI ASP.NET AJAX to the latest version, implement network segmentation, and enforce phishing-resistant multi-factor authentication for accounts that have privileged access.
Topics:businesscyber-attack-vulnerability#cve-2019-18935#cyber-attack-vulnerability#federal-agency#progress-telerik#remote-code-execution#threat-actors
- Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency The Hacker News
- Hands up who DIDN'T exploit this years-old flaw to ransack a US govt web server... The Register
- CISA: Federal civilian agency hacked by nation-state and criminal hacking groups CyberScoop
- Nation state hackers exploited years-old bug to breach a US federal agency TechCrunch
- US Government IIS Server Breached via Telerik Software Flaw Infosecurity Magazine
Want the full story? Read the original reporting
Read on The Hacker News