Malwarecritical
Latest Ivanti bug, paired with malware, earns an alert from CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-0282 | Unauthenticated RCE in Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 9.0 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
3 min read at therecord.media
Federal cybersecurity officials are warning about powerful malware used alongside the exploitation of a vulnerability in popular security tools earlier this year. The alleged Chinese hackers behind the December and January attacks on tools from tech company Ivanti deployed malware called Resurge, according to experts from Cybersecurity and Infrastructure Security Agency (CISA).
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.