Tag: IT Infrastructures

Threat actors are using a newly discovered security vulnerability that affects ZTA, Policy Secure, and Ivanti Connect Secure gateways to install a backdoor on vulnerable devices known as DSLog. The exploitation of CVE-2024-21893 was discovered by Orange Cyberdefense within hours of the proof-of-concept (PoC) code being made public, according to their results. The SAML module contains a server-side request forgery (SSRF) vulnerability called CVE-2024-21893, which was discovered by Ivanti late last month together with CVE-2024-21888. If successfully exploited, this vulnerability could provide access to previously restricted sites without the need for authentication. Since then, the Utah-based corporation has admitted that the vulnerability has reduced targeted attacks read more Iva...