Nation-state intrusion forces MITRE NERVE research network offline

MITRE disclosed on 19 April 2024 that a foreign nation-state actor had compromised its NERVE research, development and prototyping network after exploiting Ivanti Connect Secure zero-day vulnerabilities. MITRE took NERVE offline and established alternative collaboration arrangements while restoration proceeded; its core enterprise network and partners' systems were not affected. MITRE later said the activity aligned with UNC5221.