ivanti News Articles

CISA Warns of Critical Ivanti EPMM Code Injection Vulnerability Exploited in Attacks - IT Security News

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw in Ivanti Endpoint Manager Mobile (EPMM). The agency recently added this flaw, tracked as CVE-2026-1340, to its Known Exploited Vulnerabilities (KEV) catalog after…Read more →

2 weeks ago

CISA Warns of Critical Ivanti EPMM Code Injection Vulnerability Exploited in Attacks

CISA warns of an actively exploited CVE-2026-1340 flaw in Ivanti Endpoint Manager Mobile, now added to its KEV catalog.

2 weeks ago

CISA Issues Warning on Critical Ivanti EPMM Flaw Exploited in Ongoing Attacks - IT Security News

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical security flaw in Ivanti Endpoint Manager Mobile (EPMM). The agency recently added the vulnerability, identified as CVE-2026-1340, to its Known Exploited Vulnerabilities (KEV) catalog after…Rea...

2 weeks ago

U.S. CISA adds a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities catalog - IT Security News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Ivanti EPMM, tracked as CVE-2026-1340 (CVSS score of 9.8), to…Read more →

2 weeks ago

CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday

CISA has given U.S. government agencies four days to secure their systems against a critical-severity vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that has been exploited in attacks since January.

2 weeks ago

CISA warns that RESURGE malware can be dormant on Ivanti devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released new details about RESURGE, a malicious implant used in zero-day attacks exploiting CVE-2025-0282 to breach Ivanti Connect Secure devices.

Critical Ivanti EPM Vulnerability Allows Admin Session Hijacking via Stored XSS

Cross-site scripting flaw in Ivanti Endpoint Manager 2024 SU4 and earlier could let attackers steal admin sessions without needing to log in.

CVE-2025-10573: Ivanti EPM Unauth Stored XSS Fixed

Details on CVE-2025-10573 in Ivanti EPM, an unauthenticated stored XSS flaw enabling admin session hijack, plus patch, mitigation, and response steps.

Ivanti Endpoint Manager Vulnerabilities: Update Now to Prevent RCE

Ivanti EPM has critical vulnerabilities, including a 9.6 CVSS XSS flaw. Update now to prevent remote code execution and session hijacking. Learn more.

High-Risk Ivanti EPM Vulnerability Opens Door to Admin Session Hijacking

A critical stored cross-site scripting (XSS) vulnerability in Ivanti Endpoint Manager (EPM) enables unauthenticated attackers to hijack administrator sessions.

Ivanti Security Update: Patch for Code Execution Vulnerabilities in Endpoint Manager

Ivanti has officially released urgent security updates for its Endpoint Manager (EPM) solution to address four distinct security flaws.

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

CISA details attackers exploiting Ivanti EPMM zero-days CVE-2025-4427/4428 in May 2025, enabling persistent remote code execution on vulnerable server

Fixed Ivanti Bugs Still Haunt Japan Orgs 6 Months Later

Chinese threat actors have been feeding off the same Ivanti RCE vulnerabilities we've known about since last year, partly thanks to complications in patching.

Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks

Ivanti ICS flaws exploited from Dec 2024–July 2025 to deploy MDifyLoader, Cobalt Strike, and Go tools.

Ivanti Endpoint Manager Mobile Vulnerabilities Let Attackers Execute Remote Code

Ivanti disclosed two high-severity vulnerabilities in its Endpoint Manager Mobile (EPMM) product, which could allow remote attackers to execute code on affected systems.

Ivanti Workspace Control Vulnerability Lets Attackers Remotely Exploit To Steal the Credential

Ivanti has released a critical security update for its Workspace Control software, patching three high-severity vulnerabilities that could allow attackers to compromise sensitive credentials.

CISA Adds Six Known Exploited Vulnerabilities to Catalog | CISA

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.  CVE-2025-4427(link is external) Ivanti Endpoint Manager Mobile (EPMM)...

Risky Bulletin: Authorities and security firms take down DanaBot and Lumma Stealer - Risky Business Media

A coalition of law enforcement agencies and cybersecurity firms have dealt two major blows to the cybercrime ecosystem this week by taking [Read More]

Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies

Chinese hackers have been exploiting a remote code execution flaw in Ivanti Endpoint Manager Mobile (EPMM) to breach high-profile organizations worldwide.

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks

UNC5221 exploited Ivanti EPMM flaws CVE-2025-4427/4428 in global attacks starting May 15, 2025, enabling remote access and data theft

Ivanti EPMM Exploitation Tied to Older Zero-Day Attacks

Wiz researchers found an opportunistic threat actor has been targeting vulnerable edge devices, including Ivanti VPNs and Palo Alto Networks firewalls.

Ivanti EPMM 0-Day RCE Vulnerability Under Active Attack

Ivanti's Endpoint Manager Mobile (EPMM) contains a critical vulnerability chain that has been actively abused.

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild | Wiz Blog

Wiz Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).

CISA Adds Actively Exploited Ivanti EPMM Zero-Day to KEV Catalog

CISA has added two critical zero-day vulnerabilities affecting Ivanti EPMM to its KEV catalog, citing evidence of active exploitation.

Ivanti EPMM 0-day Vulnerability Actively Exploited in the Wild

Ivanti has disclosed two zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) solution. When chained together, these vulnerabilities allow attackers to execute unauthenticated remote code.