alt=Ivanti's new cloud-based platform revolutionizes data management and security. Stay in control with ease.

2024-02-08 Post a Comment

Cutting Edge, Part 2: Investigating Ivanti Connect Secure VPN Zero-Day Exploitation

By MATT LIN, ROBERT WALLACE, JOHN WOLFRAM, DIMITER ANDONOV, TYLER MCLELLAN On Jan. 12, 2024, Mandiant published a blog post detailing two high-impact zero-day vulnerabilities, CVE-2023-46805 and CVE-2024-21887, affecting Ivanti Connect Secure VPN (CS, formerly Pulse Secure) and Ivanti Policy Secure (PS) appliances. On Jan. 31, 2024, Ivanti disclosed two additional vulnerabilities impacting CS and PS devices, CVE-2024-21888 and CVE-2024-21893. The vulnerabilities allow for an unauthenticated threat actor to execute arbitrary commands on the appliance with elevated privileges. […]

alt=Image: Turtles in the data center. Terrapin attacks. Chaos ensues as unexpected visitors disrupt the data center's operations.

Cyber security

2024-01-04 Post a Comment

Nearly 11 million SSH servers vulnerable to new Terrapin attacks

By Bill Toulas Almost 11 million internet-exposed SSH servers are vulnerable to the Terrapin attack that threatens the integrity of some SSH connections. The Terrapin attack targets the SSH protocol, affecting both clients and servers, and was developed by academic researchers from Ruhr University Bochum in Germany. It manipulates sequence numbers during the handshake process to compromise the integrity of the SSH channel, particularly when specific encryption modes like ChaCha20-Poly1305 or […]

Cutting Edge, Part 2: Investigating Ivanti Connect Secure VPN Zero-Day Exploitation

Like this:

Nearly 11 million SSH servers vulnerable to new Terrapin attacks

Like this:

Cutting Edge, Part 2: Investigating Ivanti Connect Secure VPN Zero-Day Exploitation

Please Share this:

Like this:

Nearly 11 million SSH servers vulnerable to new Terrapin attacks

Please Share this:

Like this: