MITRE SAYS STATE HACKERS BREACHED ITS NETWORK VIA IVANTI ZERO DAYS

Summary from the TLDR InfoSec newsletter

MITRE announced that it has discovered a network breach due to two chained Ivanti VPN zero days. The threat actors bypassed MFA via session hijacking to move laterally across the network and deployed a combination of webshells and backdoors to harvest credentials and maintain access. Evidence collected thus far shows that the attackers did not breach the core enterprise network or partner networks.