BlogTrace : Curated intelligence from security blog posts.

Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways

Blog Source: CISA

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.02.29
Cutting Edge, Part 3: Investigating Ivanti Connect Secure VPN Exploitation and Persistence Attempts

Blog Source: Mandiant

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.02.27
Code injection or backdoor: A new look at Ivanti’s CVE-2021-44529

Blog Source: GreyNoise

IOC Available: no

YARA Rules: no

Timestamp: 2024.02.16
CVE-2023-46263: IVANTI AVALANCHE ARBITRARY FILE UPLOAD VULNERABILITY

Blog Source: Zerodayinitiative

IOC Available: no

YARA Rules: no

Timestamp: 2024.02.06
Ivanti's Pulse Connect Secure Auth Bypass Round Two

Blog Source: Assetnote

IOC Available: no

YARA Rules: no

Timestamp: 2024.02.02
Cutting Edge, Part 2: Investigating Ivanti Connect Secure VPN Zero-Day Exploitation

Blog Source: Mandiant

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.02.02
How Memory Forensics Revealed Exploitation of Ivanti Connect Secure VPN Zero-Day Vulnerabilities

Blog Source: Volexity

IOC Available: no

YARA Rules: no

Timestamp: 2024.02.01
Mitigate Ivanti Connect Secure and Ivanti Policy Secure Vulnerabilities

Blog Source: CISA

IOC Available: no

YARA Rules: no

Timestamp: 2024.01.31
Cutting Edge: Suspected APT Targets Ivanti Connect Secure VPN in New Zero-Day Exploitation

Blog Source: Mandiant

IOC Available: yes

YARA Rules: yes

Timestamp: 2024.01.31
The Unknown Unknowns: Post-Exploitation Activities of Ivanti CS/PS Appliances

Blog Source: DarkTrace

IOC Available: yes

YARA Rules: no

Timestamp: 2024.01.26