Cybersecurity Chaos: Five New Flaws Shake Up Advantive and Ivanti Systems!
The U.S. Cybersecurity and Infrastructure Security Agency adds Advantive VeraCore and Ivanti Endpoint Manager vulnerabilities to its KEV catalog. The vulnerabilities are actively exploited, with a Vietnamese threat actor dropping shells. Federal agencies must patch by March 31, 2025. Meanwhile, PHP-CGI vulnerabilities are being mass-exploited, targeting multiple countries. Stay patched, stay safe!
Hot Take:
Looks like CISA is calling out vulnerabilities like they’re bad contestants on reality TV! Advantive VeraCore and Ivanti Endpoint Manager, you’ve been voted off the island! With hackers lurking like paparazzi, it’s time to patch up before your systems end up on the cover of Cybersecurity Digest’s “Most Exploited” issue!
Key Points:
- CISA adds five new security flaws to its Known Exploited Vulnerabilities catalog.
- Vulnerabilities affect Advantive VeraCore and Ivanti Endpoint Manager.
- Vietnamese threat actor XE Group linked to VeraCore exploitations.
- No public exploitation reports yet for Ivanti EPM, but proof-of-concept exploits exist.
- FCEB agencies must apply patches by March 31, 2025.
Already a member? Log in here