BlogTrace : Curated intelligence from security blog posts.

Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

Blog Source: CISA

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.02.29
Cutting Edge: Suspected APT Targets Ivanti Connect Secure VPN in New Zero-Day Exploitation

Blog Source: Mandiant

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.01.31
The Unknown Unknowns: Post-Exploitation Activities of Ivanti CS/PS Appliances

Blog Source: DarkTrace

IOC Available: yes

YARA Rules: no

Timestamp: 2024.01.26
High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE

Blog Source: Assetnote

IOC Available: no

YARA Rules: no

Timestamp: 2024.01.18
Ivanti Connect Secure VPN Exploitation Goes Global

Blog Source: Volexity

IOC Available: no

YARA Rules: no

Timestamp: 2024.01.15
Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN

Blog Source: Volexity

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.01.10
Ivanti Connect Secure VPN Zero-Day Exploitation

Blog Source: Cybereason

IOC Available: yes

YARA Rules: no

Timestamp: 2024.01.10
Ivanti Connect Secure VPN Exploitation: New Observations

Blog Source: Volexity

IOC Available: no

YARA Rules: no

Timestamp: 2024.01.08