Hackers targeting flaws in Pulse Secure and Fortinet SSL VPNs for at least six weeks, experts say. Attackers could steal data on user accounts and passwords without having to authenticate, thus giving them full, remote access to enterprise networks. Attack alert comes in the wake of security researchers warning of a surge in scans looking for the security vulnerabilities. The greatest concentration of vulnerable Pulse Secure systems are in the United States. Both companies issued firmware updates and have continued to urge customers to patch.”]
Source: https://www.inforisktoday.com/chinese-apt-group-began-targeting-ssl-vpn-flaws-in-july-a-13037