3 ms·
State-backed hackers are exploiting new Ivanti VPN zero-days but no patches yet
- aspenmayer 3y agoRemoved a dash/hyphen due to character limits. > Ivanti said the two vulnerabilities — tracked as CVE-2023-46805 and CVE-2024-21887 — were found in its Ivanti Connect Secure software. https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authen... > …security researcher Kevin Beaumont noted on Mastodon that there will “likely be many more victims.” Beaumont, who has dubbed the two vulnerabilities “ConnectAround,” posted results from a scan showing roughly 15,000 affected Ivanti appliances exposed to the internet globally. https://cyberplace.social/@GossiTheDog/111732557100241084 https://cyberplace.social/@GossiTheDog/111732557100241084
- ThisIsMyAltAcct 3y ago>Volexity said it has evidence to suggest that the customer’s VPN appliance may have been compromised as early as December 3, and has linked the attack to a China-backed hacking group it tracks as UTA0178