Skip to content
NewA calmer, faster ZeroHour
MalwarehighExploited in the wild

CISA warns of malware deployed through Ivanti EPMM flaws

Security Affairsby @securityaffairs ()3 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-4428
+1 related CVE
Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API
8.8
group max
88%KEV
KEV

From the original article

3 min read at securityaffairs.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) disclosed two malware strains found in a network compromised via Ivanti EPMM flaws.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.