Ivanti vulnerabilities now actively exploited in massive numbers>
Malware Bytes Blog – Pieter Arntz
Ivanti Connect Secure and Ivanti Policy Secure Gateways have two vulnerabilities that are being actively exploited.
The attacks are widespread and have affected small businesses to large organizations, including Fortune 500 companies.
Over 1700 devices have been compromised, and almost 7000 remain vulnerable.
The workaround requires importing a mitigation.release.20240107\)1\)xml file, which can be obtained via the download portal.
The Integrity Checker Tool provided by Ivanti can be used to verify if a device has been compromised.
Applying the workaround or a patch is not enough to undo the effects of an attack.
ThreatDown Vulnerability and Patch Management can help keep vulnerabilities in check.
The link to the article is provided.
Link: https://www.malwarebytes.com/blog/news/2024/01/ivanti-vulnerabilities-now-actively-exploited-in-massive-numbers