ivanti

Greetings, Windows enthusiasts! If you're tuning in, you likely already know that keeping pace with cybersecurity updates is as crucial as updating your Windows system. Recently, the Cybersecurity and Infrastructure Security Agency, or CISA, has tossed another wrench into the works by adding a...

According to a recent notice from CISA, Ivanti has issued a vital security update addressing an admin bypass vulnerability tagged as CVE-2024-8963 that affects its Cloud Services Appliance (CSA) version 4.6. This vulnerability, if exploited, could allow a cyber threat actor to gain unauthorized...

The Cybersecurity and Infrastructure Security Agency (CISA) has recently bolstered its Known Exploited Vulnerabilities Catalog with a new entry: CVE-2024-8963, concerning a path traversal vulnerability within the Ivanti Cloud Services Appliance (CSA). This addition serves as a critical reminder...

In a move that underscores the relentless pressure on cybersecurity, the Cybersecurity and Infrastructure Security Agency (CISA) recently announced the addition of a new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog. This inclusion is not just a procedural update; it echoes...

Introduction Ivanti, a leader in IT asset management and security solutions, has recently thrown down the gauntlet in the cybersecurity arena. They released a critical security update for the Ivanti Cloud Services Appliance (CSA) aimed squarely at an OS command injection vulnerability known as...

Introduction Ivanti has officially rolled out critical security updates to address multiple vulnerabilities across its platforms: Endpoint Manager, Cloud Service Application 4.6, and Workspace Control. These updates target significant weaknesses that a cyber threat actor could exploit to gain...

Original release date: April 20, 2021 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is aware of compromises affecting U.S. government agencies, critical infrastructure entities, and other private sector organizations by a cyber threat actor—or actors—beginning in June 2020...