Understanding the Latest Attacks on Network Devices and Services and What You Can Do About It

Last week CISA took a major step in the fight against ransomware and state-sponsored attacks by issuing Binding Operational Directive 23-02. This directive directly calls out an area where threat actors are the most active and successful in the wild—the exploitation of network infrastructure appliances such as VPNs, switches, routers, and firewalls as well as the out-of-band management interfaces (baseboard management controllers or BMCs) that support server infrastructure. This is a critical step because it requires the 100+ federal …

area attacks binding operational directive cisa devices exploitation infrastructure latest major network network devices network infrastructure operational operational directive ransomware services sponsored state threat threat actors understanding week