#ivanti — Public Fediverse posts

Has anyone found a UK/EU sovereign MDM solution? (preferably with 1st class Linux support)
Put your hand down #Ivanti, I naturally meant a *secure* MDM...
#mdm #eusovereignty @sovtechfund

Ivanti released patches for high severity Ivanti vulnerabilities affecting Sentry and EPMM. Secure your enterprise deployments against these flaws now.

#Ivanti #Cybersecurity #CVE202683527 #CVE202618851 #InfoSec #PatchTuesday

https://securityonline.info/ivanti-sentry-epmm-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Ivanti Neurons ITSM RCE: 8 CVEs including unauthenticated code execution flaws (CVSS 9.8-9.9). Patch on-prem deployments now - cloud already fixed.

#Ivanti #ITSM #RCE #Deserialization #CVE202612744 #CVE202612650 #Cybersecurity #PatchNow #Vulnerability #InfoSec

https://securityonline.info/ivanti-neurons-itsm-rce-vulnerabilities-2026/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft Patches a Record 570 Security Flaws

https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/

#ActiveDirectoryFederationServices #PatchTuesdayJuly2026 #WindowsBitLocker #TheComingStorm #CVE-2026-48561 #CVE-2026-50661 #CVE-2026-56155 #CVE-2026-56164 #MicrosoftCorp. #SecurityTools #PavanDavuluri #SatnamNarang #TimetoPatch #ChrisGoettl #JackBicer #Action1 #Tenable #Ivanti

Cyber Journaal S02E74, de Belgische Staatsveiligheid gehackt via toeleverancier Ivanti, accountantskoepel SRA op de leaksite van LockBit en Fortinet waarschuwt zelf voor FortiBleed. https://www.ccinfo.nl/journaal/3238758_belgische-staatsveiligheid-gehackt-sra-op-leaksite #Cybersecurity #Ivanti #FortiBleed

RE: https://infosec.exchange/@cert_eu/116725684149219603

Oops, they did it again....

https://www.youtube.com/watch?v=QxBBtYStjTU

#notthebritney #BabyOneMoreTime #ivanti #RCE #unauth

Patch Tuesday, May 2026 Edition

https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/

#sansinternetstormcenter #ProjectGlasswing #LatestWarnings #TheComingStorm #TimetoPatch #ChrisGoettl #Firefox150 #Anthropic #microsoft #Mozilla #google #Ivanti #Oracle #Rapid7 #apple

Headline: #CISA gives feds four days to patch #Ivanti flaw exploited as zero-day

Source: https://www.bleepingcomputer.com/news/security/cisa-gives-feds-four-days-to-patch-ivanti-flaw-exploited-as-zero-day/

#Security #CyberSecurity

CVE Alert: CVE-2026-6973 - Ivanti - Endpoint Manager Mobile - https://www.redpacketsecurity.com/cve-alert-cve-2026-6973-ivanti-endpoint-manager-mobile/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6973 #ivanti #endpoint-manager-mobile

CVE Alert: CVE-2026-1340 - Ivanti - Endpoint Manager Mobile - https://www.redpacketsecurity.com/cve-alert-cve-2026-1340-ivanti-endpoint-manager-mobile/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-1340 #ivanti #endpoint-manager-mobile

"2025’s exploited vendors followed the same pattern we observed last year, with big tech experiencing the most zero-day exploitation and security vendors following directly behind.
...
#Cisco and #Fortinet remain commonly targeted networking and security vendors, while #Ivanti and #VMware continue to see exploitation that reflects the high value threat actors place on VPNs and virtualization platforms."

https://cloud.google.com/blog/topics/threat-intelligence/2025-zero-day-review

Watch out, as Microsoft has uncovered a Storm-2561 campaign using SEO poisoning to push fake Fortinet and Ivanti VPN sites that deliver #Hyrax infostealer malware.

Read: https://hackread.com/storm-2561-fake-fortinet-ivanti-vpn-sites-hyrax-infostealer/

#CyberSecurity #Malware #Infostealer #VPN #Fortinet #Ivanti

CVE Alert: CVE-2026-1603 - Ivanti - Endpoint Manager - https://www.redpacketsecurity.com/cve-alert-cve-2026-1603-ivanti-endpoint-manager/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-1603 #ivanti #endpoint-manager

Nice... sitting in a customer meeting and hunting IOCs. If you are using #Ivanti EPMM, you might want to take a look at this:

Mass exploitation of #CVE-2026-1281 and #CVE-2026-1340 in Ivanti EPMM

https://github.security.telekom.com/2026/03/ivanti-CVE-2026-1281-exploitation.html

#ivanti_backdoors

How #PrivateEquity Debt Left a Leading #VPN Open To Chinese #Hackers

made by #Ivanti Inc., was something of an industry standard across gov & much of the corp world. Clients included the #USAF , #Army , #Navy & other parts of the Defense Dept, the Dept of State, the #FAA , #FederalReserve , the #NASA , thousands of companies & more than 2,000 banks including #WellsFargo & Co. and #DeutscheBank AG, according to federal procurement records, internal docs
#privacy #China

https://it.slashdot.org/story/26/02/20/003230/how-private-equity-debt-left-a-leading-vpn-open-to-chinese-hackers?utm_source=rss1.0mainlinkanon&utm_medium=feed

RE: https://cyberplace.social/@GossiTheDog/116099932798369130

Ivanti, the maker of the MDM software that got hacked in Finland (case #Valtori ) and EU Commission recently, is surprisigly a steaming pile of 💩. Who could have known venture capital could lead to this? #Ivanti

CYBERCRIME QUIZ WEEK 7 - TEST JE KENNIS!

Odido-datalek, Ivanti-hacks, zes zero-days en een arrestatie in Dordrecht. Weet jij alles? Test het in 20 vragen!

https://www.ccinfo.nl/menu-onderwijs-ontwikkeling/leerplek/quiz-07-2026

#cybercrime #quiz #cybersecurity #Odido #datalek #Ivanti #Nederland

NB405: NEDERLANDSE OVERHEID GEHACKT VIA IVANTI EN ODIDO-DATALEK TREFT MILJOENEN

AP gehackt via Ivanti, zes zero-days gedicht, Odido verloor 6,2 miljoen klantgegevens en AI als wapen door statelijke hackers.

https://www.ccinfo.nl/menu-nieuws-trends/nieuwsbrief-archief/nieuwsbrief-berichten/3008529_nb405-nederlandse-overheid-gehackt-via-ivanti-en-odido-datalek-treft-miljoenen

#Nieuwsbrief #ccinfo #cybersecurity #Odido #datalek #Ivanti #Nederland

Patch Tuesday, February 2026 Edition

https://krebsonsecurity.com/2026/02/patch-tuesday-february-2026-edition/

#WindowsRemoteDesktopServices #sansinternetstormcenter #DesktopWindowManager #LatestWarnings #CVE-2026-21256 #CVE-2026-21509 #CVE-2026-21510 #CVE-2026-21513 #CVE-2026-21514 #CVE-2026-21516 #CVE-2026-21519 #CVE-2026-21523 #CVE-2026-21525 #CVE-2026-21533 #SecurityTools #MicrosoftWord #Windowsshell #TimetoPatch #ChrisGoettl #Immersive #KevBreen #Ivanti #MSHTML

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

#cybersecurity #ivanti #vulnerabilitymanagement #vulnerability

Thanks @reverseics for the infographics and Ivanti for the continuous source of discoveries.

https://db.gcve.eu/vuln/CVE-2026-1603

83% of observed Ivanti EPMM exploitation (CVE-2026-1281) traces to one bulletproof IP that isn't on any published IOC list. The IPs that are? VPN exits with zero Ivanti activity. We broke down who's actually doing this ⬇️ https://www.greynoise.io/blog/active-ivanti-exploitation

#Ivanti #ThreatIntel #CVE20261281 #InfoSec