Updates to Alert on Pulse Connect Secure | CISA

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

CISA has updated Alert AA21-110A: Exploitation of Pulse Connect Secure Vulnerabilities to include new threat actor techniques, tactics, and procedures (TTPs), indicators of compromise (IOCs), and updated mitigations.

CISA encourages users and administrators to review AA21-110A and the following resources for more information:

•    Re-Checking Your Pulse

• Ivanti KB44755 - Pulse Connect Secure (PCS) Integrity Assurance

•    Ivanti Security Advisory SA44784

•    Emergency Directive 21-03: Mitigate Pulse Connect Secure Product Vulnerabilities

This product is provided subject to this Notification and this Privacy & Use policy.