Ivanti patches four bugs found in Connect Secure, Policy Secure, and Cloud Services Applications All four could be used in RCE attacks Patches are available, and users are advised to apply them ...

CISA and FBI issue new warning about old Ivanti flaws They claim the flaws are being abused in coordinated attacks The bugs were patched in September and October 2024, so update now Security flaws ...

CISA and the FBI warned today that attackers are still exploiting Ivanti Cloud Service Appliances (CSA) security flaws patched since September to breach vulnerable networks. All four bugs have ...

Ivanti has also acknowledged that the issue also impacts Pulse Connect Secure 9.x, but stated it does not plan to offer fixes for these products as their support period has ended, ...

While no patches are available yet, Ivanti urged customers to ‘apply the mitigation immediately,’ with threat actors now exploiting the flaws to carry out worldwide attacks. Volexity ...

The company’s Connect Secure VPN is also vulnerable to a second, high-severity flaw, Ivanti says. Ivanti disclosed Wednesday that a critical-severity, zero-day vulnerability impacting its widely ...