ClosedPatched
Day · Aug 15, 2023
Ivanti EPMM zero-days used to breach 12 Norwegian ministries
Ivanti Endpoint Manager Mobile (EPMM / MobileIron Core)
Updates on Aug 15, 2023
Norway shuts down the old ministry e-mail solution and rolls out a new one
Source
Summary
APT actors exploited an unauthenticated API access bug in Ivanti Endpoint Manager Mobile (formerly MobileIron Core) as a zero-day from at least April 2023. They used it to break into the shared IT platform of 12 Norwegian government ministries, possibly chaining it with a file-write bug (CVE-2023-35081).
Read the full incident →
