CISA and FBI: hackers used vulnerabilities in Progress Telerik products to gain access to an unnamed US federal agency's server from August 2022 to January 2023
Jonathan Greig / The Record :
Context & Ripple Effects
The reported Telerik intrusion fits a recurring CISA and FBI record of public-sector compromises through exposed enterprise software: an unpatched Fortinet VPN breach at a municipal government and exploitation of F5, Citrix, Pulse Secure, and Exchange bugs against government networks. It also precedes related coverage of intrusions at several federal agencies through Progress MOVEit, making Progress products a recurring point of concern in the coverage.
First-order effects
- The unnamed federal agency must treat the server access spanning August 2022 through January 2023 as an incident requiring investigation of what the intruders reached through Telerik vulnerabilities.
- Progress Telerik becomes a named supplier in a federal-agency compromise disclosed jointly by CISA and the FBI, increasing the security relevance of its vulnerable products for government users.
Second-order effects
- Federal IT teams using Progress Telerik products face added pressure to identify vulnerable deployments alongside other externally exposed software, following the pattern of government breaches tied to Fortinet, F5, Citrix, Pulse Secure, and Exchange flaws.
- CISA and the FBI's public attribution of the access method gives agencies a concrete vulnerability class to prioritize in vendor-risk and patch-management reviews rather than treating the incident as an isolated server compromise.
Third-order effects
- Repeated government intrusions through widely deployed software point toward security posture being judged increasingly at the product and vulnerability-management level, not only by an agency's perimeter controls.
- If disclosures continue to connect separate federal incidents to common enterprise products, CISA's role as a cross-agency incident coordinator becomes more central to how agencies identify and contain shared supplier exposure.
The trend: US government cyber defense is increasingly organized around shared exposure to vulnerabilities in common enterprise software products.