Ongoing attacks on Ivanti VPNs install a ton of sneaky, well-written malware
PHASEJAM is a well-written and multifaceted bash shell script. It first installs a web shell that gives the remote hackers ...
CISA: Hackers still exploiting older Ivanti bugs to breach networks
CISA and the FBI warned today that attackers are still exploiting Ivanti Cloud Service Appliances (CSA) security flaws ...
SecurityWeek12d
FBI/CISA Share Details on Ivanti Exploits Chains: What Network Defenders Need to Know
The US government shared Ivanti exploit chains, IOCs and breach forensics data to help network defenders hunt for signs of ...
Hackers are still using old Ivanti bugs to break into networks
CISA and FBI issue new warning about old Ivanti flaws They claim the flaws are being abused in coordinated attacks The bugs ...
A brief history of mass hacks
Hackers are increasingly abusing bugs in popular enterprise software to target big companies in mass-hacking campaigns ...
aha.org10d
Advisory details how cyber actors deployed vulnerabilities in attack on Ivanti cloud products
The Cybersecurity and Infrastructure Security Agency and FBI Jan. 22 released an advisory explaining how cyberthreat actors ...
Ivanti zero-days chained together in at least 3 attacks, authorities warn
The vendor’s customers have confronted multiple attack sprees targeting zero-days spanning a variety of products.
Attackers lodge backdoors into Ivanti Connect Secure devices
Shadowserver scans found 379 compromised Ivanti Connect Secure devices. Researchers said the situation is serious and likely ...
Hosted on MSN25d
Ivanti warns another critical security flaw is being attacked
Ivanti uncovers two security vulnerabilities, including one critical-severity One of the flaws was being abused as a zero-day by a Chinese threat actor Researchers uncovered never-before-seen ...
Bleeping Computer27d
Ivanti warns of new Connect Secure flaw used in zero-day attacks
Ivanti is warning that hackers exploited a Connect Secure remote code execution vulnerability tracked as CVE-2025-0282 in zero-day attacks to install malware on appliances. The company says it ...
JD Supra4d
CISA + FBI Issue Joint Advisory on Threat Actors Chaining Ivanti Vulnerabilities
On January 22, 2025, the Federal Bureau of Investigation (FBI) and the Cybersecurity & Infrastructure Security Agency (CISA) issued a joint ...
ITWeb on MSN1d
Sustainability meets IT: How Think Tank Software Solutions, Docusign, Ivanti are driving change
By combining Ivanti’s UEM with Docusign’s paper-saving capabilities, Think Tank is positioned to offer a holistic approach to ...