While no patches are available yet, Ivanti urged customers to ‘apply the mitigation immediately,’ with threat actors now exploiting the flaws to carry out worldwide attacks. Volexity ...

Mandiant researchers reported that exploitation of two high-severity Ivanti VPN vulnerabilities began in December, confirming earlier findings on the timing of the attacks by researchers at Volexity.

CISA and the FBI strongly encouraged network administrators to upgrade to the latest supported version of Ivanti CSA. “These attacks serve as another reminder of the importance of patch management in ...