Chinese hackers are actively exploiting unauthenticated remote zero-day vulnerabilities in Ivanti Connect Secure VPN devices. Ivanti has released pre-patch mitigations while comprehensive fixes are under development. Volexity discovered the exploits after noticing suspicious activity on one of its customer's networks.
11 Impressions