Threat hunters are on high alert as 900 Ivanti Connect Secure instances remain unpatched and vulnerable to exploitation, ...

Ivanti released patches for vulnerable Connect Secure versions at the time of the zero-day disclosure, but Policy Secure and ...

Microsoft has confirmed that a staggering three zero-day cyberattacks are underway against Windows users—here’s what you need ...

Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was ...

Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.

Threat hunters are scrambling to determine the scope of damage and potential impact from a critical zero-day vulnerability that impacts a trio of Ivanti products, including Ivanti Connect Secure ...

Vulnerability revealed by Ivanti has been exploited by the same group that targeted Connect Secure from January 2024.

The zero-day in question was revealed and patched by Ivanti on January 8. Stack-based buffer overflow bug CVE-2025-0282 has a ...

Mandiant says a Chinese cyberespionage group has been exploiting the critical-rated vulnerability since at least mid-December.

Ivanti VPNs are still exposed to attacks exploiting a recent vulnerability tracked as CVE-2025-0282 and Nominet has been ...

Nominet, the U.K. domain registry that maintains .co.uk domains, has experienced a cybersecurity incident that it confirmed ...