A group of cybercriminals tracked as Storm-2561 is using fake enterprise VPN clients from CheckPoint, Cisco, Fortinet, Ivanti ...

The financially motivated group has been active since May 2025, impersonating Fortinet, Ivanti, Cisco, and other vendors to steal corporate credentials.

CISA flagged a high-severity Ivanti Endpoint Manager (EPM) vulnerability as actively exploited in attacks and ordered U.S. federal agencies to patch systems within three weeks.

The code injection flaws allow for unauthenticated remote code execution on Ivanti Endpoint Manager Mobile deployments, but also endanger connected Ivanti Sentry mobile traffic gateways. IT software ...

The US government shared exploit chains, IOCs and post-incident forensics data to help network defenders hunt for signs of Chinese hacking gangs. The US government’s cybersecurity and law enforcement ...

The Cybersecurity and Infrastructure Security Agency published detailed recommendations on two malware versions that targeted the Ivanti Endpoint Manager Mobile. The detailed report can offer ...

Old Ivanti vulnerabilities have allowed Chinese threat actors to continually attack Japanese organizations for the past eight months. But you can only bring a horse to water. Early this year, the ...

Two critical security vulnerabilities have been discovered in Ivanti Endpoint Manager Mobile (EPMM), with evidence of active exploitation in the wild. The vulnerability chain consists of CVE-2025-4427 ...

SALT LAKE CITY--(BUSINESS WIRE)--Ivanti, an enterprise software company that provides a comprehensive IT and security cloud-based platform, announced today that it has successfully closed a ...

IT software vendor Ivanti recently released details of a now-patched critical security vulnerability affecting Ivanti Connect Secure (ICS) VPN appliances, Pulse Connect Secure, Ivanti Policy Secure, ...

Networks protected by Ivanti VPNs are under active attack by well-resourced hackers who are exploiting a critical vulnerability that gives them complete control over the network-connected devices.

Ivanti has fixed a maximum severity vulnerability in its Endpoint Management software (EPM) that can let unauthenticated attackers gain remote code execution on the core server. Ivanti EPM helps ...