Mobileiron Vulnerability Used By State-backed Hackers To Break Into Networks – Experts Insight

Cyber criminals are actively exploiting the vulnerabilities in mobile device managment (MDM) solutions to successfully gain access to networks across government, healthcare and other industries as reported. An alert warning is issued by UK’s National Cyber Security Center (NCSC) to warn the users that multiple actors are exploiting MobileIron Vulnerability (CVW 2020-15505). MobileIron is a provider of MDM which allows system administrator to manage the company mobile devices from the central server.

Subscribe
Notify of
guest

1 Expert Comment
Newest
Oldest Most Voted
Inline Feedbacks
View all comments
Tom Davison
Tom Davison , EMEA Technical Director
InfoSec Expert
November 26, 2020 7:18 pm

The interesting story here is the assertion by cybersecurity agencies in the UK (NCSC) and the US (NSA) that nation-state APT groups are actively exploiting these vulnerabilities, five full months after patches were issued. Mobile Device Management servers are by definition reachable from the public internet making them opportune targets. Offering a gateway to potentially compromise every mobile device in the organisation, the attraction to attackers is clear. This highlights not just the importance of patching open vulnerabilities, but also the criticality of having a dedicated mobile security capability that is distinct from device management infrastructure.

Last edited 2 years ago by Tom Davison
Information Security Buzz
1
0
Would love your thoughts, please comment.x
()
x