Infosec in brief In a cautionary tale that no one is immune from attack, security organization MITER has admitted it caught a cold.
MITER ATT&CK Framework for Beginners
The nonprofit reported that its research and development research center — the Networked Experimentation, Research and Virtualization Environment (NERVE) — was penetrated using zero-day flaws in an Ivanti virtual private network. MITER reports that it was one of many hit by what it described as "a foreign nation-state threat actor."
"No organization is immune to this type of cyber attack, not even one that strives to maintain the highest level of cybersecurity," warned Jason Providakes, president and CEO of MITRE.
"We are disclosing this incident in a timely manner because of our commitment to acting in the public interest and to advocating best practices that improve corporate security as well as necessary actions to improve the industry's current cyber defense posture. The threats and cyber attacks are becoming more common, more sophisticated and require increased vigilance and defense strategies As we have in the past, we will share our lessons from this experience to help others and develop our own practice.
