News

CISA adds Ivanti Connect Secure vulnerability to KEV catalog
CVE-2025-22457 is a critical stack buffer-overflow vulnerability. Ivanti had initially assessed as a low-level product bug ...
CISA spots spawn of Spawn malware targeting Ivanti flaw
Uncle Sam dubbed the latest software nasty Resurge, and warned it infects devices by exploiting CVE-2025-0282 - a critical ...
Ivanti products targeted by dangerous malware yet again
CISA is warning of new malware targeting vulnerable Ivanti products Multiple products, vulnerable to a 2024 flaw, are being ...
CISA warns new malware targeting Ivanti zero-day vulnerability
CVE-2025-0282, a critical vulnerability that affects Ivanti’s Connect Secure, Policy Secure and ZTA Gateway products, was ...
Hosted on MSN6mon
CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame
The US Cybersecurity and Infrastructure Security Agency (CISA) says vulnerabilities in Fortinet and Ivanti products are now being exploited, earning them places in its Known Exploited ...
CRN1y
CISA: Using Ivanti VPNs May Pose ‘Significant Risk’
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned organizations to “consider the significant risk” that may be posed by continuing to use widely exploited Ivanti VPNs ...
The Hacker News3d
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware
Ivanti patches CVE-2025-22457 exploited by UNC5221 in March 2025, risking remote code execution and credential theft.
CRN1y
CISA Breached Via Ivanti VPN Vulnerabilities: Report
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reportedly confirmed that two of its systems were compromised in February by hackers that exploited Ivanti VPN vulnerabilities.
SecurityWeek10d
CISA Analyzes Malware Used in Ivanti Zero-Day Attacks
CISA has published its analysis of Resurge, a SpawnChimera malware variant used in attacks targeting a recent Ivanti Connect Secure zero-day.
Infosecurity Magazine10d
New Malware Variant RESURGE Exploits Ivanti Vulnerability
CISA recommends immediate action to address malware variant RESURGE exploiting Ivanti vulnerability CVE-2025-0282 ...
CISA warns of "Resurge" malware after Ivanti ICS attacks
Attacks on Ivanti's ICS have been known since the beginning of January. CISA has analyzed the malware that attackers have ...
Infosecurity-magazine.com1mon
CISA Urges All Organizations to Patch Exploited Critical Ivanti Vulnerabilities
Three critical vulnerabilities in Ivanti software have recently been added to the US Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog. In a new ...