One of the biggest flaws exploited by Salt Typhoon hackers has had a patch available for years
The vulnerability, nicknamed ProxyLogon, was disclosed by Microsoft in 2021, and a patch has been available for 4 years.
aha.org4d
Advisory details how cyber actors deployed vulnerabilities in attack on Ivanti cloud products
The Cybersecurity and Infrastructure Security Agency and FBI Jan. 22 released an advisory explaining how cyberthreat actors ...
Hackers are still using old Ivanti bugs to break into networks
The agencies have, once again, repeated their earlier calls for upgrades, and urged network administrators to be on the lookout for signs of compromise. By submitting your information you agree to the ...
techzine4d
Lack of patching leads to massive exploitation of Ivanti hardware
CISA, the U.S. cybersecurity agency, and the FBI report that attackers are still exploiting security vulnerabilities in ...
CISA: Hackers still exploiting older Ivanti bugs to breach networks
CISA and the FBI warned today that attackers are still exploiting Ivanti Cloud Service Appliances (CSA) security flaws ...
Ivanti zero-days chained together in at least 3 attacks, authorities warn
The vendor’s customers have confronted multiple attack sprees targeting zero-days spanning a variety of products.
The Hacker News5d
Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)
A third vulnerability patched by Cisco is CVE-2025-20128 (CVSS score: 5.3), an integer underflow bug impacting the Object ...
SecurityWeek6d
FBI/CISA Share Details on Ivanti Exploits Chains: What Network Defenders Need to Know
The US government shared Ivanti exploit chains, IOCs and breach forensics data to help network defenders hunt for signs of ...
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
Data from the Shadowserver Foundation shows 48,457 Fortinet boxes are still publicly exposed and haven't had the patch for ...
Infosecurity-magazine.com11dOpinion
Learning from 2024: An Unprecedented Exploitation of Remote Access Technologies
Paolo Passeri discusses the unprecedented number of exploitation of remote access technologies in 2024, and how organizations ...
Critical Vulnerabilities Found In Ivanti Endpoint Manager Versions
IT software vendor Ivanti recently released security updates to address multiple vulnerabilities in its Avalanche, Application Control Engine, and ...
The Hacker News12d
Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager
Ivanti patches four EPM vulnerabilities (CVSS 9.8) and updates Avalanche and Application Control Engine. No exploitation ...