{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries · updates",
  "home_page_url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078",
  "feed_url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078/feed.json",
  "description": "APT actors exploited an unauthenticated API access bug in Ivanti Endpoint Manager Mobile (formerly MobileIron Core) as a zero-day from at least April 2023. They used it to break into the shared IT platform of 12 Norwegian government ministries, possibly chaining it with a file-write bug (CVE-2023-35081).",
  "language": "en",
  "_pwn": {
    "slug": "ivanti-epmm-norway-government-cve-2023-35078",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078/feed.xml",
    "llms": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078/llms.txt",
    "json": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-08-15-03f86684",
      "url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-08-15-03f86684",
      "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Norway shuts down the old ministry e-mail solution and rolls out a new one",
      "content_text": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Norway shuts down the old ministry e-mail solution and rolls out a new one\n\nSource: https://www.regjeringen.no/en/whats-new/shutdown-of-e-mail-solution-following-cyberattack/id2991023/",
      "date_published": "2023-08-15T00:00:00.000Z",
      "external_url": "https://www.regjeringen.no/en/whats-new/shutdown-of-e-mail-solution-following-cyberattack/id2991023/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-08-01-076046ae",
      "url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-08-01-076046ae",
      "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: CISA and NCSC-NO advisory AA23-213A: exploited as a zero-day since at least April 2023",
      "content_text": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: CISA and NCSC-NO advisory AA23-213A: exploited as a zero-day since at least April 2023\n\nSource: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-213a",
      "date_published": "2023-08-01T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-213a",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-28-04693be9",
      "url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-28-04693be9",
      "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Ivanti patches the second bug, CVE-2023-35081",
      "content_text": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Ivanti patches the second bug, CVE-2023-35081",
      "date_published": "2023-07-28T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-25-f40abfbd",
      "url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-25-f40abfbd",
      "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: CISA adds CVE-2023-35078 to the KEV catalog",
      "content_text": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: CISA adds CVE-2023-35078 to the KEV catalog",
      "date_published": "2023-07-25T00:00:00.000Z",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-24-6141254a",
      "url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-24-6141254a",
      "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Norway: cyber-attack on the ICT platform used by 12 ministries through a zero-day in a supplier's software",
      "content_text": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Norway: cyber-attack on the ICT platform used by 12 ministries through a zero-day in a supplier's software\n\nSource: https://www.regjeringen.no/en/whats-new/ministries-hit-by-cyber-attacks/id2990098/",
      "date_published": "2023-07-24T00:00:00.000Z",
      "external_url": "https://www.regjeringen.no/en/whats-new/ministries-hit-by-cyber-attacks/id2990098/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-23-f4a695b7",
      "url": "https://pwn.watch/i/ivanti-epmm-norway-government-cve-2023-35078#2023-07-23-f4a695b7",
      "title": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Ivanti patches CVE-2023-35078",
      "content_text": "Ivanti EPMM zero-days used to breach 12 Norwegian ministries: Ivanti patches CVE-2023-35078\n\nSource: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-213a",
      "date_published": "2023-07-23T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-213a",
      "tags": [
        "critical"
      ]
    }
  ]
}