United States
USA
Nation-state intrusion forces MITRE NERVE research network offline
MITRE's post-incident investigation places the first evidence of intrusion into the NERVE research network on 31/12/2023, using Ivanti Connect Secure zero-day vulnerabilities. MITRE later took NERVE offline and shifted collaboration while investigating and restoring the isolated R&D environment; its enterprise network and partners' systems were not affected.
69
Estimated severity
69 / 100
92
Source reliability
92 / 100
Approximate Date
2023-12-31
Targeted Company
MITRE
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionService unavailability
Affected sectors
Education & Research
Affected departments
Information Technology
Attack Profile
Attack types
BackdoorExploitation of vulnerabilityUnauthorized accessZero-day exploitation
Attributed threat actors
UNC5221
Sources
Incident Sources
mitre.orghttps://www.mitre.org/news-insights/news-release/mitre-response-cyber-attack-one-its-rd-networksmitre.orghttps://www.mitre.org/news-insights/impact-story/mitre-concludes-its-internal-cyber-attack-investigationmedium.comhttps://medium.com/mitre-engenuity/technical-deep-dive-understanding-the-anatomy-of-a-cyber-intrusion-080bddc679f3ctid.mitre.orghttps://ctid.mitre.org/blog/2024/05/22/infiltrating-defenses-abusing-vmware-in-mitres-cyber-intrusion/