Jan 8, 2025
1 new incident, 0 with updates.
Started
- ClosedPatched
Ivanti Connect Secure zero-day exploited since mid-December 2024 (CVE-2025-0282)
An unauthenticated stack buffer overflow in Ivanti Connect Secure allowed remote code execution. Mandiant saw zero-day exploitation from mid-December 2024 and SPAWN-family malware (SPAWNANT, SPAWNMOLE, SPAWNSNAIL). CISA advised factory-resetting compromised appliances before restoring them on 22.7R2.5 or later.
Ivanti Connect Secure, Policy Secure, ZTA GatewaysClosed Jan 8, 2025
