MITRE ATT&CKED: InfoSec's Most Trusted Name Falls to Ivanti Bugs

MITRE's unclassified NERVE network was compromised after attackers exploited two Ivanti Connect Secure zero-day vulnerabilities in January, bypassing MFA via session hijacking, pivoting into VMware infrastructure to deploy web shells and backdoors, and exfiltrating data to a command-and-control server; the compromise persisted until detection in April.