Chinese Hackers Attack NYC MTA using Pulse Secure zero-day

Chinese-sponsored state hackers have breached New York City's Metropolitan Transportation Authority (MTA) network in April using a Pulse Secure zero-day. The attackers weren't able to get away with any data or get access to systems controlling the transportation fleet. MTA mitigated the vulnerability on April 21, one day after Pulse Secure issued an advisory, and CISA published an alert on the Pulse Secure zero-day exploited in the attack. Read more...