Ivanti-linked breach of CISA potentially affected more than 100,000 individuals

CISA disclosed that attackers exploited a known Ivanti vulnerability to compromise the Chemical Security Assessment Tool (CSAT) and a CISA Gateway portal; a webshell was deployed on CSAT and the incident potentially affected over 100,000 individuals. CISA took affected systems offline, reported no evidence of data exfiltration so far, notified Congress and impacted parties, and is completing remediation and improvements while investigating attribution and lessons learned.