In mid-September of this year, researchers from FortiGuard Labs uncovered an attack in which an unidentified threat actor exploited vulnerabilities in Ivanti’s Cloud Services Appliance (CSA). One of the three discovered vulnerabilities was already...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of their active exploitation by threat actors. The list includes vulnerabilities...
Researchers have disclosed a proof-of-concept exploit for a critical vulnerability in Ivanti Endpoint Manager (CVE-2024-29847, CVSS score: 9.8), which permits remote code execution. The exploit is now publicly available, making it imperative to update...
