At least 3,825 Pulse Secure VPN servers remain at risk because they have not been updated with a patch to fix a critical vulnerability, designated CVE-2019-1150. Vulnerable servers traced to at least 2535 organizations, government agencies, universities and numerous Fortune 500 companies, Bad Packets reports. Some attackers have been targeting Active Directory credentials as part of their ransomware-infection efforts, researcher Kevin Beaumont says. “Several thousand Pulse Secure servers are still online, including extremely high-profile U.S. and U.K. companies””]
Source: https://www.careersinfosecurity.com/patch-or-perish-vpn-servers-hit-by-ransomware-attackers-a-13583