North Korea hackers breached South Korea’s Atomic Energy Research Institute using a VPN vulnerability. IssueMakersLab traced one IP address to state-backed Kimsuky.
A joint FBI and CISA alert warned that hackers were exploiting Fortinet’s VPN vulnerability and the Microsoft Zerologon bug to compromise government networks hosting election systems.
Newly uncovered cyber espionage scheme shows Iranian hackers using unpatched VPN vulnerabilities as a point of entrance into the networks of government and private sector organizations.