New, by @carlypage: U.S. cybersecurity agency CISA gives federal agencies just two days to disconnect flawed Ivanti VPN products under mass-exploitation.
Volexity founder Steven Adair told TechCrunch that at least 2,200 Ivanti devices have been compromised to date, though the "total number is likely much higher."
More: https://techcrunch.com/2024/02/01/cisa-federal-agencies-disconnect-ivanti-vpn/