Security researchers at Juniper Threat Labs have uncovered a dangerous escalation in attacks targeting Ivanti Connect Secure (ICS) and Ivanti Policy Secure Gateways. Attackers are weaponizing two critical vulnerabilities, CVE-2023-46805 (authentication bypass) and CVE-2024-21887...
Researchers at the MITRE Corporation have unveiled disturbing details of a cyberattack attributed to a Chinese state-sponsored hacking group. The attack, first detected in December 2023, exploited zero-day vulnerabilities in Ivanti Connect Secure to...
Magnet Goblin is a financially motivated threat actor demonstrating proficiency in swiftly exploiting 1-day software vulnerabilities to gain a foothold in target environments. Their opportunistic approach targets a range of edge devices and enterprise...
Security researchers from NVISO have uncovered two sophisticated TLS-based backdoors, dubbed SparkCockpit and SparkTar, actively targeting critical-sector organizations using Ivanti Pulse Secure appliances. These backdoors demonstrate a worrying escalation in network appliance attacks, compromising...
Recently, QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based implant found in Ivanti Connect Secure (ICS) VPN compromised appliances (CVE-2023-21887 and CVE-2023-46805). This discovery marks a...
Recently, the cyber intelligence firm Volexity has detected many malicious exploitation activities using critical vulnerabilities in Ivanti Connect Secure VPN appliances. It was on January 15, 2024, that Volexity first detailed the exploitation of...
Ivanti, a well-known software company, has revealed two critical zero-day vulnerabilities in its Connect Secure and Policy Secure products. These vulnerabilities are already exploited by attackers. The first of these vulnerabilities, labeled CVE-2023-46805 and...
Secure Your Connection
