China-Linked Hackers Used VPN Flaw to Target US Defense Industry: Researchers

China-Linked Hackers Used VPN Flaw to Target US Defense Industry: Researchers
The Ivanti logo and cyber binary codes are seen in this illustration on April 20, 2021. Dado Ruvic/Reuters
|Updated:

WASHINGTON—At least two groups of China-linked hackers have spent months using a previously undisclosed vulnerability in virtual private networking devices to spy on the U.S. defense industry, researchers and the devices’ manufacturer said.

Utah-based IT company Ivanti said in a statement on April 20 the hackers took advantage of the flaw in its Pulse Connect Secure suite to break into the systems of “a very limited number of customers.”