The Register on MSN13d
Zero-day exploits plague Ivanti Connect Secure appliances for second year running
Factory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging ...
Ivanti zero-day attacks infected devices with custom malware
Hackers exploiting the critical Ivanti Connect Secure zero-day vulnerability disclosed yesterday installed on compromised VPN ...
CSOonline13d
Ivanti zero-day exploited by APT group that previously targeted Connect Secure appliances
Vulnerability revealed by Ivanti has been exploited by the same group that targeted Connect Secure from January 2024.
Hosted on MSN8d
Nominet probes network intrusion linked to Ivanti zero-day exploit
Unauthorized activity detected, but no backdoors found UK domain registry Nominet is investigating a potential intrusion into ...
Ivanti zero-day has researchers scrambling
Threat hunters are on high alert as 900 Ivanti Connect Secure instances remain unpatched and vulnerable to exploitation, according to Shadowserver.
The Register on MSN1d
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
Data from the Shadowserver Foundation shows 48,457 Fortinet boxes are still publicly exposed and haven't had the patch for CVE-2024-55591 applied, despite stark warnings issued over the past seven ...
Hackers are exploiting a new Ivanti VPN security bug to hack into company networks
Mandiant says a Chinese cyberespionage group has been exploiting the critical-rated vulnerability since at least mid-December.
CRN13d
Ivanti Discloses Exploitation Of ‘Critical’ VPN Vulnerability
Ivanti’s Connect Secure VPN is vulnerable to a critical-severity zero-day vulnerability that has been exploited in attacks as ...
UK domain registry Nominet confirms breach via Ivanti zero-day
Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was ...
Ongoing attacks on Ivanti VPNs install a ton of sneaky, well-written malware
PHASEJAM is a well-written and multifaceted bash shell script. It first installs a web shell that gives the remote hackers ...
Infosecurity-magazine.com9d
UK Registry Nominet Breached Via Ivanti Zero-Day
The zero-day in question was revealed and patched by Ivanti on January 8. Stack-based buffer overflow bug CVE-2025-0282 has a ...
UK domain giant Nominet confirms cybersecurity incident linked to Ivanti VPN hacks
Nominet, the U.K. domain registry that maintains .co.uk domains, has experienced a cybersecurity incident that it confirmed ...