CISA Warns Patched Pulse Secure VPNs Still Vulnerable

Hackers Using Stolen Active Directory Credentials to Access Networks
CISA issued a warning to organizations running Pulse Secure VPN servers that their networks may still be vulnerable to hacking even if they applied patches for a previous flaw. Attackers are now using stolen Active Directory credentials to access networks.