VPN, Ivanti
Ongoing attacks on Ivanti VPNs install a ton of sneaky, well-written malware
PHASEJAM is a well-written and multifaceted bash shell script. It first installs a web shell that gives the remote hackers privileged control of devices. It then injects a function into the Connect Secure update mechanism that’s intended to simulate the upgrading process.
Google: Chinese hackers likely behind Ivanti VPN zero-day attacks
Hackers exploiting the critical Ivanti Connect Secure zero-day vulnerability disclosed yesterday installed on compromised VPN appliances new malware called 'Dryhook' and 'Phasejam' that is not currently associated with any threat group.
Ivanti issues urgent alert on a new vulnerability found in their Connect Secure product, urging immediate action to mitigate ...
Threat actors are once again lining up to exploit vulnerabilities in the widely used Ivanti product suite, with a link to Chinese espionage activity firmed up by Mandiant analysts.
Vulnerability revealed by Ivanti has been exploited by the same group that targeted Connect Secure from January 2024.
Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.
Researchers at Google Cloud-owned Mandiant say that the exploitation of a critical Ivanti Connect Secure vulnerability began ...
Ivanti has warned customers of a critical vulnerability impacting its VPN appliances that is being actively exploited in the ...
The Register on MSN1d
Zero-day exploits plague Ivanti Connect Secure appliances for second year runningFactory resets and apply patches is the advice amid fortnight delay for other appliances The cybersecurity industry is urging ...
The latest attacks come one year after a threat group exploited a pair of zero-days in the same Ivanti product.
Ivanti warns against active attacks on Ivanti Secure Connect systems. Networks can be compromised through code smuggling.
Results that may be inaccessible to you are currently showing.
Hide inaccessible results
Feedback