Vulnerabilities
Ivanti has released patches for multiple vulnerabilities in Endpoint Manager (EPM), including four critical-severity flaws.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Ivanti"
Vulnerabilities
Many Ivanti VPNs are still exposed to attacks exploiting a recent vulnerability tracked as CVE-2025-0282 and Nominet has been named as a victim.
Malware & Threats
Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.
Malware & Threats
Ivanti confirms zero-day exploitation of a remotely exploitable code execution flaw in its Connect Security product line.
Vulnerabilities
Ivanti has released patches for critical vulnerabilities in Cloud Services Application, Connect Secure, and Policy Secure.
Vulnerabilities
Ivanti has released fixes for dozens of vulnerabilities in Endpoint Manager, Avalanche, Connect Secure, Policy Secure, and Secure Access Client.
Nation-State
Fortinet believes state-sponsored threat actors are behind the recent attacks involving exploitation of Ivanti CSA zero-days.
Vulnerabilities
Ivanti says a few more CSA zero-day vulnerabilities have been found to be exploited in attacks where they are chained with CVE-2024-8963.
Vulnerabilities
An Ivanti EPM SQL injection vulnerability tracked as CVE-2024-29824 has been exploited to target some of the company’s customers.
Vulnerabilities
CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild.
Vulnerabilities
In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited.
Vulnerabilities
The Ivanti Cloud Service Appliance vulnerability CVE-2024-8190 has been exploited in the wild, with attacks starting just days after disclosure.
Data Breaches
PowerSchool says the personal information of students and educators was stolen in a December 2024 data breach.
Vulnerabilities
Malware & Threats
Network Security
Cybersecurity Funding
