Nation-State
Fortinet believes state-sponsored threat actors are behind the recent attacks involving exploitation of Ivanti CSA zero-days.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Ivanti"
Vulnerabilities
Ivanti says a few more CSA zero-day vulnerabilities have been found to be exploited in attacks where they are chained with CVE-2024-8963.
Vulnerabilities
An Ivanti EPM SQL injection vulnerability tracked as CVE-2024-29824 has been exploited to target some of the company’s customers.
Vulnerabilities
CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild.
Vulnerabilities
In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited.
Vulnerabilities
The Ivanti Cloud Service Appliance vulnerability CVE-2024-8190 has been exploited in the wild, with attacks starting just days after disclosure.
Vulnerabilities
Ivanti has released patches for multiple vulnerabilities in Endpoint Manager, Cloud Service Appliance, and Workspace Control.
Vulnerabilities
Ivanti has released patches for multiple vulnerabilities in Neurons for ITSM, Avalanche, and Virtual Traffic Manager, including critical bugs.
Vulnerabilities
Ivanti has released product updates to resolve multiple vulnerabilities, including critical code execution flaws in Endpoint Manager.
Nation-State
MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities.
Vulnerabilities
Ivanti releases patches for 27 vulnerabilities in the Avalanche MDM product, including critical flaws leading to command execution.
Network Security
Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.
Government
Ivanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization.
Vulnerabilities
CVE-2023-48788, a critical SQL injection vulnerability in Fortinet’s FortiClient EMS product, is being exploited in the wild.
Vulnerabilities
Ivanti has released patches for two critical-severity vulnerabilities leading to arbitrary command execution.
Government
Credentials stored on Ivanti VPN appliances impacted by recent vulnerabilities are likely compromised, government agencies say.
Malware & Threats
Chinese threat actors target Ivanti VPN appliances with new malware designed to persist system upgrades.
Malware & Threats
Backdoor deployed using recent Ivanti VPN vulnerability enables command execution, web request and system log theft.
Vulnerabilities
Organizations urged to hunt for potential compromise as exploitation of a recent Ivanti enterprise VPN vulnerability begins.
Vulnerabilities
An XXE flaw in Ivanti Connect Secure, Ivanti Policy Secure, and ZTA gateways could lead to unauthenticated access to resources.
Artificial Intelligence
As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that defines our humanity.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Data Breaches
Artificial Intelligence
Data Breaches
Artificial Intelligence
Data Breaches
