CISA’s Newest Headache: Advantive and Ivanti Vulnerabilities Make the Exploited List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog. The XE Group, a Vietnamese cybercrime gang, is exploiting the VeraCore vulnerabilities for remote access. No reports yet on Ivanti EPM attacks, but proof-of-concept code is out there.
Hot Take:
Looks like CISA is adding more vulnerabilities to its shopping cart, and it’s not even Black Friday yet! With the Advantive VeraCore and Ivanti EPM flaws now on the menu, cybercriminals must be thrilled. It’s like giving them a buffet of exploits to choose from! But fear not, our trusty CISA is on the case, urging a fix faster than you can say “SQL injection!”
Key Points:
- Advantive VeraCore and Ivanti EPM vulnerabilities added to CISA’s Known Exploited Vulnerabilities catalog.
- XE Group, a Vietnamese cybercrime group, is exploiting VeraCore vulnerabilities.
- Public proof-of-concept code exists for Ivanti EPM flaws, but real-world exploitation is yet to be reported.
- Federal agencies ordered to patch these vulnerabilities by March 31, 2025.
- Private organizations are advised to review and address vulnerabilities listed in CISA’s catalog.
Already a member? Log in here