Ivanti gateway attacks demand patching and deeper forensics
Daily Cyber News: Ivanti gateway attacks demand patching and deeper forensics
attackers are exploiting Ivanti Connect Secure gateways to gain unauthenticated root-level access. The observed attack chain targeted credentials and secrets associated with Active Directory, including local administrator passwords and BitLocker recovery keys. Some appliances were considered fully patched when they were compromised because a partial fix had not yet reached every supported version.
Key context: This is not a patch-only response.
Additional detail: The larger pattern is the gap between fixing one product branch and protecting every supported version.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, vulnerability, Ivanti, gateway, attacks, demand, patching, deeper.
