Mastodawn

CISA Mandates Emergency Patch for Exploited Ivanti EPMM Flaw

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert, ordering US government agencies to patch a critical vulnerability in Ivanti Endpoint Manager Mobile (EPMM) within just four days, as the flaw has been under active exploitation since January. With a Sunday deadline looming, federal IT…

https://osintsights.com/cisa-mandates-emergency-patch-for-exploited-ivanti-epmm-flaw?utm_source=mastodon&utm_medium=social

#IvantiEpmm #Cisa #EndpointSecurity #ExploitedVulnerability #EmergingThreats

CISA Mandates Emergency Patch for Exploited Ivanti EPMM Flaw

Patch Ivanti EPMM flaw now: CISA mandates emergency update for exploited vulnerability, secure systems within four days to prevent cyber attacks.

OSINTSights

BeyondMachines

Sep 9, 2023

Cisco VPN in ASA and FTD unpatched vulnerability exploited in ransomware group attacks
#cybersecurity #infosec #advisory #exploitedvulnerability
https://beyondmachines.net/event_details/cisco-vpn-in-asa-and-ftd-unpatched-vulnerability-exploited-in-ransomware-group-attacks-6-a-s-d-1/gD2P6Ple2L

Cisco VPN in ASA and FTD unpatched vulnerability exploited in ransomware group attacks

Cisco has identified a critical zero-day vulnerability, tracked as CVE-2023-20269, in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software, which has been actively exploited by the Akira ransomware group since August. It can be remotely exploited via brute force attacks, prompting Cisco to work on security updates and share indicators of compromise (IoCs) and recommending mitigation measures.

BeyondMachines