Skip to content
NewA calmer, faster ZeroHour
RansomwarecriticalExploited in the wild

Questions mount as Ivanti tackles another round of zero

CyberScoopby @CyberScoopNews ()6 min read3 · 3 reads
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-4428
+1 related CVE
Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API
8.8
group max
88%KEV
KEV

From the original article

6 min read at cyberscoop.com

The besieged security vendor maintains the latest exploited vulnerabilities in its products are entirely linked to unspecified security issues in open-source libraries. Some researchers aren’t buying it. A logo sign outside of the headquarters of Ivanti in South Jordan, Utah.

CyberScoop

By @CyberScoopNews · cyberscoop.com

Read the full article at CyberScoop

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.