Unpatched VPN servers targeted by nation-state attackers, UK’s GCHQ intelligence agency says. UK’s National Cyber Security Center warns of ongoing attacks on name-brand VPNs. Affected sectors include government, military, academic, business and healthcare, NCSC says. U.S. Cybersecurity and Infrastructure Security Agency urges organizations to patch vulnerable systems. APT5, which appears to be linked to the Chinese government, began targeting unpatched products in mid-July, if not earlier, in August.”]
Source: https://www.govinfosecurity.com/unpatched-vpn-servers-targeted-by-nation-state-attackers-a-13202