Page 1 of 1

Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days

Posted: Thu Jan 11, 2024 1:41 am
by rbc
Malware hunters at Volexity on Wednesday warned that suspected Chinese nation-state hackers are actively exploiting a pair of unauthenticated remote zero-day vulnerabilities in Ivanti Connect Secure VPN devices.

The vulnerabilities, tracked as CVE-2023-46805 and CVE-2024-21887, affect fully patched Internet-facing Ivanti Connect Secure VPN appliances (formerly known as Pulse Secure) and were caught during in-the-wild zero-day exploitation.

Ivanti, a company that has struggled with major security problems, released pre-patch mitigations for the new vulnerabilities but said comprehensive fixes will be released on a staggered schedule beginning on January 22.
[...]
Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days