CISA has revealed a sophisticated Chinese espionage campaign targeting Ivanti Endpoint Manager Mobile systems through two critical zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428). The attacks exploited authentication bypass and code injection flaws to deploy advanced malware tha...
CISA has uncovered a sophisticated cyberattack targeting Ivanti Endpoint Manager Mobile systems, where threat actors exploited two critical vulnerabilities (CVE-2025-4427 and CVE-2025-4428) to deploy advanced malware backdoors. The May 2025 attack involved chaining an authentication bypass...
Chinese state-sponsored hackers (UNC5221) are exploiting two critical Ivanti EPMM vulnerabilities (CVE-2025-4427, CVE-2025-4428) in a global cyber espionage campaign targeting healthcare, telecommunications, aviation, government, finance, and defense sectors across Europe, North America, a...
