Jul 28, 2023

Updated

• Closed✓Patched

  Ivanti EPMM zero-days used to breach 12 Norwegian ministries

  APT actors exploited an unauthenticated API access bug in Ivanti Endpoint Manager Mobile (formerly MobileIron Core) as a zero-day from at least April 2023. They used it to break into the shared IT platform of 12 Norwegian government ministries, possibly chaining it with a file-write bug (CVE-2023-35081).

  Ivanti Endpoint Manager Mobile (EPMM / MobileIron Core)·Closed Aug 15, 2023·updated Aug 15, 2023