State-of-the-art persistent threat actors are exploiting properly-recognised legacy vulnerabilities in opposition to U.S. governing administration networks, which could pose a hazard to election units.
The FBI and the Cybersecurity and Infrastructure Protection Agency (CISA) Friday issued an advisory stating they recently observed APT actors chaining numerous legacy vulnerabilities, in blend with a more recent privilege escalation vulnerability in Home windows Netlogon, dubbed “Zerologon.” According to the notify, vulnerability chaining is a frequently utilised tactic that exploits numerous vulnerabilities in the course of a single intrusion to compromise a network or application. In this situation, the destructive action was generally directed at federal and state, community, tribal and territorial (SLTT) governing administration networks.
“Even though it does not look these targets are becoming chosen mainly because of their proximity to elections details, there may perhaps be some hazard to elections details housed on governing administration networks,” the advisory reported. “CISA is