MITRE admits 'nation state' attackers touched its NERVE R&D operation

A security briefing reports multiple active and high-risk issues: MITRE's NERVE research network was compromised by a foreign nation-state exploiting Ivanti VPN zero-days; PuTTY users must rotate 521-bit ECDSA keys after CVE-2024-31497; Russian-linked Akira ransomware actors are actively abusing legacy Cisco VPN and web-service CVEs to gain access and encrypt data; critical vulnerabilities were disclosed in Atlassian Bamboo and several ICS and Cisco products; and online mental-health provider Cerebral settled FTC charges after sharing sensitive user data with third parties.