DHS urges organizations to update their passwords and make sure that a critical Pulse Secure VPN flaw has been patched, as attackers continue to exploit the flaw. Attackers have already exploited the flaw to snatch up victims credentials and now are using those credentials to move laterally through organizations. The Department of Homeland Security has also released a new tool to help network admins sniff out any indicators of compromise on their systems that are related to the flaw, CISA said. The flaw exists in Pulse Connect Secure s SSL VPN platform used by various enterprises and organizations.
Source: https://threatpost.com/dhs-urges-pulse-secure-vpn-users-to-update-passwords/154925/