CISA hacked, systems offline due to security breach, take action

TLDR:

• CISA, a government agency responsible for cybersecurity, had two systems breached by hackers in February through Ivanti vulnerabilities.
• The systems, critical to U.S. infrastructure, were shut down in response to the breach.

In a recent security breach, hackers targeted the Cybersecurity and Infrastructure Security Agency (CISA) by exploiting vulnerabilities in Ivanti products. CISA, responsible for enhancing the United States’ cybersecurity posture, confirmed that two systems were breached in February. The affected systems, part of the Infrastructure Protection Gateway and the Chemical Security Assessment Tool, were crucial for assessing critical U.S. infrastructure. While CISA did not confirm whether these specific systems were taken offline, they did state that there was no operational impact at the time of the breach. The hackers gained access by exploiting vulnerabilities in Ivanti Connect Secure VPN and Ivanti Policy Secure products, which had been previously warned about by CISA. Although the attack did not impact operations at CISA, it serves as a reminder of the importance of having a robust incident response plan in place to combat cyber vulnerabilities.