There are no slow weeks in Cyber. This week we’ve seen some additional disclosure from Microsoft, a serious Fortinet flaw and proof that no organization is invulnerable to being breached.
More fallout from Microsoft’s January breach
Links: The Hacker News; Arsetechnica
Following Microsoft’s January breach, the company published an update on March 8th disclosing they had uncovered evidence that the data exfiltrated in January has been used to gain further unauthorized access to their systems and some of their source code repositories.
CISA falls victim to Ivanti vulnerabilities
Links: CNN; The Record
Cybersecurity and Infrastructure Security Agency (CISA) was breached back in February using the widely reported Ivanti vulnerabilities.
Fortinet flaw being actively exploited
Links: Bleeping Computer; Bleeping Computer
A critical Fortinet flaw may impact 150,000 exposed devices, and has been confirmed as being actively exploited by CISA.
