CISA investigated an enterprise intrusion in which the attacker had legitimate credentials for the Pulse Secure VPN and then deployed the Supernova malware on a SolarWinds Orion instance.
President Biden plans to nominate Jen Easterly, a former Army officer and NSA official, to head the Cybersecurity and Infrastructure Security Agency.
Attackers are exploiting four vulnerabilities in the Accellion File Transfer Appliance, weeks after patches were released.
National security experts and policy makers say the U.S. needs to act now to raise the cost of doing business for state-backed attackers.