Here's a story to make us all feel a little safer.
The government just announced that back in February, hackers breached the systems of the U.S. Cybersecurity and Infrastructure Security Agency (CISA) through vulnerabilities in Ivanti IT products that the agency was using.
That's right, our cybersecurity agency was hacked.
If that's not enough, the Ivanti products with the vulnerabilities were specific to managing IT, including security and system access.
Try to keep up:
The cybersecurity software our cybersecurity agency was using was vulnerable to cyber attack.
"The impact was limited to two systems, which we immediately took offline. We continue to upgrade and modernize our systems, and there is no operational impact at this time," an agency spokesperson said.
"This is a reminder that any organization can be affected by a cyber vulnerability and having an incident response plan in place is a necessary component of resilience."
Reports suggest that the two systems affected were the Infrastructure Protection (IP) Gateway, which houses critical information about the interdependency of U.S. infrastructure, and the Chemical Security Assessment Tool (CSAT), which houses private sector chemical security plans.
CSAT houses some of the country's most sensitive industrial information, including the Top Screen tool for high-risk chemical facilities, Site Security Plans and the Security Vulnerability Assessments.
CISA will neither confirm nor deny that these are the systems affected.
But CISA was not the only agency using Ivanti products. Apparently 15 U.S. agencies used the products, though there is no word as to how widespread the breach may have been.
CISA is not saying who the hackers were, but Ivanti said that it was Chinese hackers using the exploits against their customers.
How many cyber attacks from China must we suffer before we admit we're in a cyber war?
P.S. Now check out our latest video 👇
