Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware
A pair of zero-day vulnerabilities in Ivanti Connect Secure (ICS) virtual private network (VPN) devices have been discovered recently, and they have been utilized to drop the open-source Sliver adversary simulation program. The payload, named KrustyLoader, is built on Rust.
On vulnerable appliances, the security flaws identified as CVE-2023-46805 (CVSS score: 8.2) and CVE-2024-21887 (CVSS score: 9.1) could be exploited in concert to accomplish unauthenticated remote code execution.
As of January 26, the software vendor has published an XML file as a temporary mitigation read more Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader Malware.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, ...