The Norwegian government has warned (translation here) that its ICT platform used by 12 ministries has suffered a cyberattack after hackers exploited a zero-day, authentication-bypass vulnerability in Ivanti’s Endpoint Manager Mobile solution.
- “This vulnerability was unique and was discovered for the very first time here in Norway. If we had released the information about the vulnerability too early, it could have contributed to it being misused elsewhere in Norway and in the rest of the world,” the National Security Authority said.
According to Shodan’s Internet exposure scanning platform, over 2,900 MobileIron user systems are presently exposed online, of which about three dozen are linked with U.S. local and state government agencies.The Norwegian National Cyber Security Center has notified all known MobileIron Core customers in Norway that there is a security update available to address the actively exploited zero-day bug, and Monday CISA also published their own advisory warning of the vulnerability. The government continues to operate normally.
Ted Miracco, CEO, Approov Mobile Security had this comment:
“Another day, another zero-day is becoming the norm when it comes to state sponsored cyber attacks. This MobileIron exploitation demonstrates how governments are struggling to stay ahead of sophisticated hackers. Norway was probably right to withhold details while working to patch vulnerable systems. This attack shows no network is impenetrable, and government and businesses must constantly and diligently hunt for security gaps, as weaknesses inevitably emerge.
MobileIron has patched this issue. Which means that if you’re a user of MobileIron, you should be patching all the things. And you should do it quickly before you’re the next victim.
Related
This entry was posted on July 26, 2023 at 8:30 am and is filed under Commentary. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Norway’s Government Zero-Day vuln hack also linked to U.S. agencies
The Norwegian government has warned (translation here) that its ICT platform used by 12 ministries has suffered a cyberattack after hackers exploited a zero-day, authentication-bypass vulnerability in Ivanti’s Endpoint Manager Mobile solution.
According to Shodan’s Internet exposure scanning platform, over 2,900 MobileIron user systems are presently exposed online, of which about three dozen are linked with U.S. local and state government agencies.The Norwegian National Cyber Security Center has notified all known MobileIron Core customers in Norway that there is a security update available to address the actively exploited zero-day bug, and Monday CISA also published their own advisory warning of the vulnerability. The government continues to operate normally.
Ted Miracco, CEO, Approov Mobile Security had this comment:
“Another day, another zero-day is becoming the norm when it comes to state sponsored cyber attacks. This MobileIron exploitation demonstrates how governments are struggling to stay ahead of sophisticated hackers. Norway was probably right to withhold details while working to patch vulnerable systems. This attack shows no network is impenetrable, and government and businesses must constantly and diligently hunt for security gaps, as weaknesses inevitably emerge.
MobileIron has patched this issue. Which means that if you’re a user of MobileIron, you should be patching all the things. And you should do it quickly before you’re the next victim.
Share this:
Like this:
Related
This entry was posted on July 26, 2023 at 8:30 am and is filed under Commentary. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.