CISA gives US federal agencies three days to fix a VPN bug being attacked by a ransomware gang

A group of ransomware exploits a file Uncorrected bug In security tools used throughout the US federal government, prompting the US cybersecurity agency CISA to order all civilian agencies to address the vulnerability by the end of Wednesday.

Cybersecurity company Check Point Software said the bug affects several of its computers Remote access tools, firewalls, and virtual private networks (VPNs).which act as digital gatekeepers to protect company networks from unauthorized access.

The company said In a separate post It confirmed that the vulnerability was exploited by a well-known ransomware group called Qilin to compromise “a few dozen targeted organizations globally” that relied on the affected security tools.

The hacks began on May 7, but activity began to pick up last week, according to Check Point.

Given the risks to the network of federal government organizations, CISA on Monday ordered all civilian federal agencies — such as Homeland Security, the State Department, and Treasury — to fix any instances in which agencies used the affected products by the end of June 11. Board of Directors 22-01and its operational guidance memorandum that allows it to direct agencies to take security actions when there is an active cyber threat to government networks.