Ivanti 製品の脆弱性：中国系のハッカーが新たな TTP を開発している iototsecnews.jp/2024/04/05/chi… #ActiveDirectory #APT #BRICKSTORM #ConnectSecure #Ivanti #LDAP #Mandiant #PoCExploit #PolicySecure #RAT #ROOTROT #SPAWN #TERRIBLETEA #TTP #UNC5221 #UNC5266 #UNC5291 #UNC5330 #VoltTyphoon

Multiple #vulnerabilities discovered in #Ivanti #ConnectSecure and #PolicySecure Gateways. Patch now to prevent #DoS attacks and potential code execution forums.ivanti.com/s/article/SA-C…

Ivanti Rushes Patches for 4 New Flaws in Connect Secure and Policy Secure thehackernews.com/2024/04/ivanti… #Infosec #Security #Cybersecurity #CeptBiro #Ivanti #Patches #ConnectSecure #PolicySecure

Ivanti vows to transform its security operating model, reveals new vulnerabilities - helpnetsecurity.com/2024/04/04/iva… - @GoIvanti @AbbottJeff #Ivanti #ConnectSecure #PolicySecure #Vulnerability #SecurityPractices #Enterprise #CybersecurityNews #InfosecNews #ITsecurity

csirt_it: ‼️ #Ivanti: rilevate 4 nuove vulnerabilità relative ai prodotti #ConnectSecure e #PolicySecure Rischio: 🟡 Tipologia: 🔸 Arbitrary Code Execution 🔸 Denial of Service 🔸 Information Disclosure 🔗csirt.gov.it/contenuti/riso… 🔄 Aggiornamenti disp…

‼️ #Ivanti: rilevate 4 nuove vulnerabilità relative ai prodotti #ConnectSecure e #PolicySecure Rischio: 🟡 Tipologia: 🔸 Arbitrary Code Execution 🔸 Denial of Service 🔸 Information Disclosure 🔗csirt.gov.it/contenuti/riso… 🔄 Aggiornamenti disponibili 🔄

Ivanti の SSRF 脆弱性 CVE-2024-21893：新たな DSLog バックドアの展開に悪用される iototsecnews.jp/2024/02/12/hac… #BackDoor #ConnectSecure #CVE202421893 #CyberAttack #DSLog #Exploit #IDSIPS #InfoStealer #Ivanti #Malware #Orange #PolicySecure #RAT #Shadowserver #TTP #ZTAGateway

Ivanti ICS に新たな脆弱性 CVE-2024-22024：パッチ適用までの緩和策とは？ iototsecnews.jp/2024/02/08/iva… #ConnectSecure #CVE202422024 #ICS #IDSIPS #Ivanti #PolicySecure #Shadowserver #VPN #Vulnerability #ZTAGateway

Ivanti の新たな脆弱性 CVE-2024-21888／CVE-2024-21893：攻撃が急増している iototsecnews.jp/2024/02/05/exp… #CISA #ConnectSecure #CVE202421888 #CVE202421893 #CyberAttack #Exploit #Ivanti #PolicySecure #Shadowserver #Vulnerability

Patch now or turn it off, I think is the best advice at this point. #ivanti #zerodays #connectsecure #policysecure #multiplevulnerabilities #ssrf #authbypass #privesc #xxe #commadinjection #cve ncsc.gov.uk/news/exploitat…

!! #Ivanti: rilevata una nuova vulnerabilità relativa ai prodotti #ConnectSecure, #PolicySecure e #ZTA Rischio: 🟠 Tipologia 🔸 Information Disclosure 🔗csirt.gov.it/contenuti/vuln… ⚠ Si raccomanda di seguire le azioni di mitigazione fornite dal vendor

CISA が異例の通達：Ivanti の疑わしいインスタンスを 48時間以内に隔離せよ iototsecnews.jp/2024/02/01/cis… #APT #CISA #ConnectSecure #CyberAttack #Exploit #FCEB #Government #Ivanti #Malware #PolicySecure #RAT #Vulnerability

Ivanti の新たな脆弱性 CVE-2024-21888／CVE-2024-21893：すでに悪用を観測 iototsecnews.jp/2024/01/31/iva… #ConnectSecure #CyberAttack #Exploit #Ivanti #NeuronsforZTA #PolicySecure #Vulnerability

European security agencies publish joint statement on Ivanti Connect Secure, Policy Secure vulnerabilities - Industrial Cyber industrialcyber.co/threat-landsca… #Cybersecurity #ITSecurity #Vulnerability #Patching #Ivant #ConnectSecure #PolicySecure #industrialcyber #icssecurity #ics

Ivanti Addresses Zero-Day Vulnerability Exploited in Attacks Read HiveForce Labs' threat advisory: hivepro.com/threat-advisor… #Ivanti #ConnectSecure #PolicySecure #ZeroDay #CVE202421893 #CVE202421888 #HiveForceLabs #HivePro #SecurityUpdate #ThreatAdvisory #ThreatHunting

#Ivanti announces two new vulns affecting #ConnectSecure (9.x, 22.x) and #PolicySecure (9.x, 22.x) products, #CVE202421888 and #CVE202421893. @CISAgov has ordered all US government Ivanti servers to be taken offline by Saturday, Feb. 3. Read more now: bit.ly/3O7Ng9n

🔍#Ivanti discovered two severe vulnerabilities affecting #ConnectSecure, #PolicySecure, and Neurons for ZTA: CVE-2024-21888, CVE-2024-21893; the latter has been added to the #CISA #KEV Catalog due to #exploitation. 🔗socradar.io/vulnerability-… #CyberSecurity #Vulnerability

Urgent #IvantiSecurity Alert! High-severity flaws #CVE-2024-21888 and #CVE-2024-21893 in #ConnectSecure and #PolicySecure expose privilege escalation and unauthorized access. forums.ivanti.com/s/article/CVE-…

#Ivanti #Patch releases for #VPN zero-days, discloses two more high-severity vulns theregister.com/2024/01/31/iva… 1st round of patches for #Vulnerability-stricken #ConnectSecure & #PolicySecure gateways. 2x new #zeroday found. #CyberSecurity #InfoSec #Vulnerability #Patch #0Day