Uploaded February 2024 | Updated September 2026, 2 hours ago
In an unprecedented move, the US government's cybersecurity agency CISA, mandated that all federal civilian executive branch agencies disconnect all Ivanti VPN appliances within 48 hours. This rare occurrence came after four critical CVEs were documented.
In this Bugcrowd Security Flash, Casey Ellis breaks down:
• Why the CISA mandate is such a big deal to both government and non-government agencies;
• What type of impact organizations can expect from potential exploits;
• How organizations can identify if Ivanti has been exploited in their environment; and
• How security leaders can minimize exposure from this exploit and ones like it in the future.
📖 Read the blog: bugcrowd.com/blog/security-flash-cisa-order-to-disconnect-ivanti-products
In an unprecedented move, the US government's cybersecurity agency CISA, mandated that all federal civilian executive branch agencies disconnect all Ivanti VPN appliances within 48 hours. This rare occurrence came after four critical CVEs were documented.
In this Bugcrowd Security Flash, Casey Ellis breaks down:
• Why the CISA mandate is such a big deal to both government and non-government agencies;
• What type of impact organizations can expect from potential exploits;
• How organizations can identify if Ivanti has been exploited in their environment; and
• How security leaders can minimize exposure from this exploit and ones like it in the future.
📖 Read the blog: bugcrowd.com/blog/security-flash-cisa-order-to-disconnect-ivanti-products
