Tag archive
Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
CISA's three-day clock means exposed Ivanti Sentry systems aren't just overdue for patches. They're suspected breach scenes.
Ivanti patched two critical Sentry flaws, including a CVSS 10 bug that can give remote attackers root command execution.
Ivanti EPMM CVE-2026-6973 has become an urgent security concern after Ivanti confirmed that the...
CISA has issued an urgent directive for U.S. federal agencies to secure Ivanti Endpoint Manager...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for...
Fortinet, Ivanti Patch Critical Vulnerabilities TL;DR: Breaking tech news from SecurityWeek » Feed. What Happened 📰 SecurityWeek » Feed is...
Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. This vulnerability can be successfully exploited in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors.
CISA just updated its malware analysis report on RESURGE — and the finding is alarming: this implant...
> About Author Hi, I'm Sharon, a product manager at Chaitin Tech. We build SafeLine, an...