MITRE attack strikes a NERVE after Ivanti to VMware pivot
"We did not detect… lateral movement into our VMware infrastructure. At the time we believed we took all the necessary actions to mitigate the vulnerability, but these actions were clearly insufficient.”
MITRE – an organisation set up to “advance national security in new ways” – was breached via a zero day in its Ivanti appliances, with private network NERVE, which hosts a “virtual development environment for all military branches and their respective weapons systems” compromised, in a potentially landmark incident for the US federal and defence sectors.
