CISA orders Ivanti devices targeted by Chinese hackers be disconnected

[rbc]

Any federal agency running Ivanti Connect Secure or Ivanti Policy Secure devices must disconnect them from their networks before midnight Friday, the United States’s top civilian cyber defense agency said Wednesday amid reports the vulnerable devices are being targeted by espionage operations linked to China.

Last month, CISA warned that the vulnerable Ivanti devices were subject to “widespread exploitation of vulnerabilities by multiple threat actors.” On Wednesday, the agency issued new instructions for how to update and bring those devices back online.

A CISA spokesperson did not immediately respond to a question about how many instances of Ivanti’s affected product are present in federal networks.
[...]
CISA orders Ivanti devices targeted by Chinese hackers be disconnected