RESURGE Alert: New Malware Variant Exploiting Ivanti Vulnerability – Stay Secure!
CISA’s Malware Analysis Report introduces RESURGE, a new malware variant with impressive reboot survival skills and unique behavior-altering commands. It’s exploiting CVE-2025-0282 in Ivanti Connect Secure appliances. Stay ahead with detection signatures and avoid becoming the unwitting star of a cyber thriller featuring stack-based buffer overflow vulnerabilities!

Hot Take:
CISA’s latest malware revelation, RESURGE, is the kind of cyber villain that doesn’t just crash the party—it sticks around to eat all the chips, and then changes the music playlist to something only it enjoys. This malware is like a bad houseguest that’s not only hard to kick out, but also redecorates your living room when you’re not looking!
Key Points:
- RESURGE is a new malware variant identified by CISA, with traits from the notorious SPAWNCHIMERA.
- It has a knack for surviving system reboots, ensuring its presence is felt long after the initial breach.
- RESURGE exploits the CVE-2025-0282 vulnerability found in Ivanti Connect Secure appliances.
- This vulnerability was added to CISA’s Known Exploited Vulnerabilities Catalog on January 8, 2025.
- Detection tools and rules for RESURGE are available, including YARA rules and a SIGMA YAML file.
Already a member? Log in here