Collaborate Disseminate
By Deeba Ahmed
Ivanti has released patches for vulnerabilities found in its enterprise VPN appliances, including two flagged as exploited zero-days…
This is a post from HackRead.com Read the original post: Ivanti VPN Flaws Exploited by DSLog Back… Continue reading Ivanti VPN Flaws Exploited by DSLog Backdoor and Crypto Miners
Backdoor deployed using recent Ivanti VPN vulnerability enables command execution, web request and system log theft.
The post Ivanti Vulnerability Exploited to Deliver New ‘DSLog’ Backdoor appeared first on SecurityWeek.
Continue reading Ivanti Vulnerability Exploited to Deliver New ‘DSLog’ Backdoor
Hackers are actively exploiting a vulnerability (CVE-2024-21893) in Ivanti Connect Secure, Policy Secure and Neurons for ZTA to inject a “previously unknown and interesting backdoor” dubbed DSLog. CVE-2024-21893 patches and exploitation Iva… Continue reading Attackers injected novel DSLog backdoor into 670 vulnerable Ivanti devices (CVE-2024-21893)
Organizations urged to hunt for potential compromise as exploitation of a recent Ivanti enterprise VPN vulnerability begins.
The post Exploitation of Another Ivanti VPN Vulnerability Observed appeared first on SecurityWeek.
Continue reading Exploitation of Another Ivanti VPN Vulnerability Observed
An XXE flaw in Ivanti Connect Secure, Ivanti Policy Secure, and ZTA gateways could lead to unauthenticated access to resources.
The post Ivanti Patches High-Severity Vulnerability in VPN Appliances appeared first on SecurityWeek.
Continue reading Ivanti Patches High-Severity Vulnerability in VPN Appliances
January 2024 Patch Tuesday is behind us. A relatively light release from Microsoft with 39 CVEs addressed in Windows 10, 35 in Windows 11, and surprisingly no zero-day vulnerabilities from Microsoft to start the new year. January’s release was a bit un… Continue reading February 2024 Patch Tuesday forecast: Zero days are back and a new server too
CVE-2024-21893, a server-side request forgery (SSRF) vulnerability affecting Ivanti Connect Secure VPN gateways and Policy Secure (a network access control solution), is being exploited by attackers. About CVE-2024-21893 CVE-2024-21893 allows a attacke… Continue reading Ivanti Connect Secure flaw massively exploited by attackers (CVE-2024-21893)
By Deeba Ahmed
Zero-Day Nightmare: CVE-2024-21893 Exploits Surge in Attacks on Ivanti Products.
This is a post from HackRead.com Read the original post: Chained Exploits, Stolen VPN Access: Hackers Target Ivanti Users Despite Patches
Continue reading Chained Exploits, Stolen VPN Access: Hackers Target Ivanti Users Despite Patches
An updated emergency directive includes instructions on how to bring affected devices back online securely.
The post CISA orders Ivanti devices targeted by Chinese hackers be disconnected appeared first on CyberScoop.
Continue reading CISA orders Ivanti devices targeted by Chinese hackers be disconnected
In an unprecedented move, CISA is demanding that federal agencies disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure products within 48 hours.
The post CISA Sets 48-hour Deadline for Removal of Insecure Ivanti Products appeared … Continue reading CISA Sets 48-hour Deadline for Removal of Insecure Ivanti Products