SDxCentral

Ivanti updates Connect Secure, Policy Secure for CVE-2025-22457 vulnerabilities

For any instances of Ivanti Connect Secure that were not updated by Feb. 28, 2025, to the latest Ivanti patch (22.7R2.6) and all instances of Pulse Connect Secure (EoS), Policy Secure, and ZTNA ...
CRN

CISA Urges Patching For ‘Critical’ Ivanti VPN Flaw Exploited In Attacks

Exploitation of the Ivanti Connect Secure vulnerability may be linked to a China-based espionage group, according to Mandiant researchers. A critical-severity vulnerability in Ivanti’s Connect Secure ...
Business Wire

Ivanti Receives German Federal Office for Information Security (BSI) Clearance for Ivanti Endpoint Manager Mobile (EPMM) for use with Apple® iNDIGO Devices

FRANKFURT, Germany--(BUSINESS WIRE)--Ivanti, the tech company that breaks down barriers between IT and security so that Everywhere Work can thrive, has been accepted into BSI's certification program ...
SDxCentral

CISA and Partners Release Advisory on Threat Actors Exploiting Ivanti Connect Secure and Policy Secure Gateways Vulnerabilities

The Ivanti Integrity Checker Tool is not sufficient to detect compromise due to the ability of threat actors to deceive it, and A cyber threat actor may be able to gain root-level persistence despite ...
dbta

Ivanti Connect Secure Version 25.X Offers Modern OS and SELinux Advances

Ivanti, a global enterprise IT and security software company, is releasing Ivanti Connect Secure (ICS) version 25.X, aiming to redefine VPN security. According to the company, the new ICS release ...
Ars Technica

Ongoing attacks on Ivanti VPNs install a ton of sneaky, well-written malware

Networks protected by Ivanti VPNs are under active attack by well-resourced hackers who are exploiting a critical vulnerability that gives them complete control over the network-connected devices.