Do Son A China-nexus APT group exploited Ivanti Connect Secure VPN vulnerabilities to infiltrate organizations globally, deploying the SPAWNCHIMERA malware toolkit
CVE-2025-22457
Week of April 7-13 saw critical Ivanti, WordPress, & Windows vulnerabilities exploited, plus major data breaches impacting millions.
Rapid7 reveals details of Ivanti zero-day CVE-2025-22457, a critical stack-based buffer overflow actively exploited by a China-linked group. Learn about the vulnerability and available patches.
Explore the top VPN vulnerabilities for 2025. Understand the risks from AI attacks and perimeter device exploitation.
Learn about CVE-2025-22457, a critical vulnerability in Ivanti products that allows remote code execution by attackers.