ivanti connect secure Archives

Memory Forensics

How Memory Forensics Revealed Exploitation of Ivanti Connect Secure VPN Zero-Day Vulnerabilities

February 1, 2024

Andrew Case, Michael Hale Ligh, and Volexity Volcano Team

In a recent series of blog posts related to two zero-day vulnerabilities in Ivanti Connect Secure VPN, Volexity shared details of active in-the-wild exploitation; provided an update on how exploitation […]

Threat Intelligence

Ivanti Connect Secure VPN Exploitation: New Observations

January 18, 2024

Matthew Meltzer, Sean Koessel, and Steven Adair

On January 15, 2024, Volexity detailed widespread exploitation of Ivanti Connect Secure VPN vulnerabilities CVE-2024-21887 and CVE-2023-46805. In that blog post, Volexity detailed broader scanning and exploitation by threat actors […]

Threat Intelligence

Ivanti Connect Secure VPN Exploitation Goes Global

January 15, 2024

Cem Gurkok, Paul Rascagneres, Sean Koessel, Steven Adair, and Tom Lancaster

Important: If your organization uses Ivanti Connect Secure VPN and you have not applied the mitigation, then please do that immediately! Organizations should immediately review the results of the built-in […]

Threat Intelligence

Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN

January 10, 2024

Matthew Meltzer, Robert Jan Mora, Sean Koessel, Steven Adair, and Tom Lancaster

Volexity has uncovered active in-the-wild exploitation of two vulnerabilities allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. An official security advisory and knowledge base article have been […]