Security News

Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws
2025-02-21 06:51

PoC exploit code shows why this is a patch priority Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven't already...

Ivanti fixes three critical flaws in Connect Secure & Policy Secure
2025-02-12 17:26

Ivanti has released security updates for Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Secure Access Client (ISAC) to address multiple vulnerabilities, including three...

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure – Update Now
2025-02-12 05:57

Ivanti has released security updates to address multiple security flaws impacting Connect Secure (ICS), Policy Secure (IPS), and Cloud Services Application (CSA) that could be exploited to achieve...

CISA: Hackers still exploiting older Ivanti bugs to breach networks
2025-01-23 16:51

CISA and the FBI warned today that attackers are still exploiting Ivanti Cloud Service Appliances (CSA) security flaws patched since September to breach vulnerable networks. [...]

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager
2025-01-16 06:39

Ivanti has rolled out security updates to address several security flaws impacting Avalanche, Application Control Engine, and Endpoint Manager (EPM), including four critical bugs that could lead...

UK domain registry Nominet breached via Ivanti zero-day
2025-01-13 20:03

The number of internet-facing Ivanti Connect Secure instances vulnerable to attack via CVE-2025-0282 has fallen from 2,048 to 800 in the last four days, the Shadowserver Foundation shared today....

UK domain registry Nominet confirms breach via Ivanti zero-day
2025-01-13 16:50

Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was breached two weeks ago using an Ivanti VPN zero-day vulnerability. [...]

Nominet probes network intrusion linked to Ivanti zero-day exploit
2025-01-13 10:29

Unauthorized activity detected, but no backdoors found UK domain registrar Nominet is investigating a potential intrusion into its network related to the latest Ivanti zero-day exploits.…

Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast
2025-01-12 09:00

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Ivanti Connect Secure zero-day exploited by attackers (CVE-2025-0282) Ivanti has fixed two...

Zero-Day Vulnerability in Ivanti VPN
2025-01-09 17:16

It’s being actively exploited.