“No organization is immune from this type of cyber attack, not even one that strives to maintain the highest cybersecurity possible.”
MITRE got in through two chained Ivanti VPN zero-days, then lost MFA to session hijacking and an administrator account to the attackers. The breach happened in January, the same month CISA ordered federal agencies to fix those Ivanti bugs immediately. Volexity counted more than 2,100 backdoored Ivanti appliances. The organization that catalogs attacker techniques for everyone else just became a case study.