VPN Flaws Allowed Chinese Hackers to Compromise Dozens of Ivanti Customers, Says Report

VPN Flaws Exposed Ivanti Customers to Chinese Hackers

Chinese hackers allegedly broke into the network of an Ivanti subsidiary in 2021, exploiting a backdoor in its VPN product. This allowed the hackers to gain access to 119 other unnamed organizations.

The Vulnerability

The vulnerability in Ivanti's VPN product was discovered in 2021, but it's unclear when the hackers actually exploited it. The report doesn't specify how the hackers gained access to the network or what data they stole.

Ivanti's Response

Ivanti has not commented on the report, but the company has a history of dealing with security breaches. In 2020, Ivanti was hit by a ransomware attack that affected several of its customers.

The Impact

The impact of the breach is still unclear, but it's likely that the hackers stole sensitive data from Ivanti's customers. The report doesn't specify what data was stolen or how it was used.

Conclusion

The breach highlights the importance of securing VPN products and ensuring that they are free from vulnerabilities. It also raises questions about the effectiveness of Ivanti's security measures and the company's response to the breach.

Sources

[1] VPN flaws allowed Chinese hackers to compromise dozens of Ivanti customers, says report