https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282 An unauthenticated stack buffer overflow in Ivanti Connect Secure allowed remote code execution. Mandiant saw zero-day exploitation from mid-December 2024 and SPAWN-family malware (SPAWNANT, SPAWNMOLE, SPAWNSNAIL). CISA advised factory-resetting compromised appliances before restoring them on 22.7R2.5 or later. en Wed, 08 Jan 2025 00:00:00 GMT https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282 https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282#2025-01-08-8bd51049 Wed, 08 Jan 2025 00:00:00 GMT critical <p><a href="https://www.bleepingcomputer.com/news/security/ivanti-warns-of-new-connect-secure-flaw-used-in-zero-day-attacks/">Source</a></p> https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282 https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282#2025-01-08-2c7f5abf Wed, 08 Jan 2025 00:00:00 GMT critical <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day/">Source</a></p> https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282 https://pwn.watch/i/ivanti-connect-secure-zero-day-cve-2025-0282#2025-01-08-548bc479 Wed, 08 Jan 2025 00:00:00 GMT critical <p><a href="https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-0282">Source</a></p>