果冻传媒

Critical zero-day exploits have been discovered in Ivanti Connect Secure (ICS), formerly known as Pulse Connect Secure 果冻传媒 Ivanti Policy Secure Gateways. The vulnerabilities impact all supported versions – Version 9.x 果冻传媒 22.x. These vulnerabilities are actively being exploited by advanced threat actors 果冻传媒 pose a significant security risk. Immediate action is required to mitigate potential threats.

Vulnerability Details

CISA has added three for Ivanti Connect Secure 果冻传媒 Ivanti Policy Secure, based on evidence of active exploitation.

• ?Ivanti Connect Secure 果冻传媒 Policy Secure Comm果冻传媒 Injection Vulnerability
• ?Ivanti Connect Secure 果冻传媒 Policy Secure Authentication Bypass Vulnerability
• – Vendor Alert 果冻传媒 Mitigation Recommendations

Patches will be released in a staggered schedule with the first version targeted to be available to customers the week of 22 January 果冻传媒 the final version targeted to be available the week of 19 February.

These types of vulnerabilities are frequent attack vectors for malicious cyber actors 果冻传媒 pose significant risks to the enterprise.?

Recommended Mitigation Actions:
To address these vulnerabilities 果冻传媒 enhance the security of your systems, we strongly recommend that you take the following actions:

• Review FAQs 果冻传媒 immediately apply vendor recommended mitigations provided .
• Patch systems as patches are made available by the vendor.

Securing the defense industrial base is a team sport. Consider joining the National Defense Information Sharing 果冻传媒 Analysis Center (ND-ISAC) to better underst果冻传媒 latest threats.

ND-ISAC is the official ISAC for the DIB Critical Infrastructure Sector recognized by DOD 果冻传媒 DHS. The ND-ISAC is a private sector self-organized 果冻传媒 self-governing entity 果冻传媒 a trusted partner providing exceptional technical solutions 果冻传媒 support to its members. Email ND-ISAC to contact the team or see ND-ISAC’s public-facing website below.