alt=3D render of a stylized black and red checkers board with abstract pieces.

2025-02-11 Post a Comment

Huge cyber attack under way – 2.8 million IPs being used to target VPN devices

ByÂ Sead FadilpaÅ¡iÄ‡ Millions of devices, likely infected with malware, are being used in a hacking campaign Researchers spotted brute-force attacks against VPN and other internet-connected devices The majority of the IP addresses are located in Brazil A wide range of Virtual Private Network (VPN) and other networking devices are currently under attack by threat actors trying to break in to wider networks, experts have warned. Threat monitoring platform The […]

Cyber security

2025-01-10 Post a Comment

Ivanti warns of new Connect Secure flaw used in zero-day attacks

By Lawrence Abrams Ivanti is warning that hackers exploited aÂ Connect Secure remote code execution vulnerability tracked as CVE-2025-0282Â in zero-day attacks to install malware on appliances. The company says it became aware of the vulnerabilities after the Ivanti Integrity Checker Tool (ICT) detected malicious activity on customers’ appliances. Ivanti launched an investigation and confirmed that threat actors were actively exploiting CVE-2025-0282 as a zero-day. CVE-2025-0282 is a critical (9.0) stack-based buffer […]

alt=Ivanti's new cloud-based platform revolutionizes data management and security. Stay in control with ease.

Cyber security

2024-02-08 Post a Comment

Cutting Edge, Part 2: Investigating Ivanti Connect Secure VPN Zero-Day Exploitation

By MATT LIN, ROBERT WALLACE, JOHN WOLFRAM, DIMITER ANDONOV, TYLER MCLELLAN On Jan. 12, 2024, Mandiant published aÂ blog postÂ detailing two high-impact zero-day vulnerabilities,Â CVE-2023-46805Â andÂ CVE-2024-21887, affecting Ivanti Connect Secure VPN (CS, formerly Pulse Secure) and Ivanti Policy Secure (PS) appliances. On Jan. 31, 2024, IvantiÂ disclosedÂ two additional vulnerabilities impacting CS and PS devices,Â CVE-2024-21888 and CVE-2024-21893. The vulnerabilities allow for an unauthenticated threat actor to execute arbitrary commands on the appliance with elevated privileges. […]

alt=A snowball in the snow, representing the snowball effect.

Cyber security

2024-02-02 Post a Comment

More Ivanti VPN Zero-Days Fuel Attack Frenzy as Patches Finally Roll

Tara Seals, Managing Editor, News, Dark Reading Both China-backed APTs and ordinary cyberattackers have seized on a pair of Ivanti VPN bugs for global exploitation. Ivanti has finally begun patching a pair of zero-day security vulnerabilities disclosed on Jan. 10 in its Connect Secure VPN appliances. However, it also announced two additional bugs today in the platform, CVE-2024-21888 and CVE-2024-21893 â€” the latter of which is also under active exploitation […]