Patch Tuesday and CISA Has Been Hacked

Patch Tuesday Update Reminder

by Artie Kaye

Devices and applications need to be updated and protected, especially when new vulnerabilities and flaws are discovered, and when new products and features are released. Many critical issues have been resolved by multiple companies in March, from Adobe to Microsoft. Take a moment to make sure your phone, operating system, or other tech devices are up to date.

Linked below are several companies which have rolled out patches for March.

---

CISA Hacked

by Artie Kaye

In February, the Cybersecurity and Infrastructure Security Agency (CISA) was targeted, and evidence of an active infiltration was discovered. CISA disabled the devices which were compromised. The agency pointed to a previously released statement regarding Ivanti Connect Secure and Policy Secure Gateways. Multiple high-severity flaws exist in these products and have been patched. If you are using Ivanti services or devices, please patch them as soon as possible. This attack highlights that any organization–no matter how secure–can still be penetrated. Paying attention to your IT security can help mitigate or, in cases like this one, stop malicious actions before they become a serious problem.

The advisory statement from CISA regarding the Ivanti products can be found below.

---