Ivanti
16
It’s the end of March 2025...of course CISOs still need to worry about Ivanti Connect Secure flaws.
Factory reset devices after threat hunting even if NO compromise detected says CISA
Previously unseen malware being deployed, and UK's NCSC is "investigating cases of active exploitation affecting UK networks"
But details of campaign blasted by one industry veteran for giving away too much detail on web shells on victims' systems
Still a hit with hackers after all these months
"Code execution in 0 seconds (3 seconds to be more accurate), no limitation, no authentication..."
"We did not detect… lateral movement into our VMware infrastructure. At the time we believed we took all the necessary actions to mitigate the vulnerability, but these actions were clearly insufficient.”