GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    The Shadowserver Foundation (shadowserver@infosec.exchange)'s status on Friday, 19-Jan-2024 20:03:27 JSTThe Shadowserver FoundationThe Shadowserver Foundation
    in reply to
    • Volexity :verified:

    In collaboration with @volexity we have added daily scans & reports of compromised Ivanti Connect Secure VPN instances. Data shared in our Compromised Website report, tagged "ivanti-connect-secure".

    609 IPs found on 2023-01-16: https://shadowserver.org/what-we-do/network-reporting/compromised-website-report/

    https://dashboard.shadowserver.org/statistics/combined/tree/?day=2024-01-16&source=compromised_website&tag=ivanti-connect-secure%2B&geo=all&data_set=count&scale=log

    Background: https://www.volexity.com/blog/2024/01/15/ivanti-connect-secure-vpn-exploitation-goes-global/

    In conversationabout a year ago from infosec.exchangepermalink

    Attachments


    1. https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/770/495/009/654/673/original/37ae18a8aede998d.png

    3. Domain not in remote thumbnail source whitelist: www.volexity.com
      Ivanti Connect Secure VPN Exploitation Goes Global
      from Volexity
      On January 10, 2024, Volexity publicly shared details of targeted attacks by UTA0178 exploiting two zero-day vulnerabilities (CVE-2024-21887 and CVE-2023-46805) in Ivanti Connect Secure (ICS) VPN appliances. On the same day, Ivanti published a mitigation that could be applied to ICS VPN appliances to prevent exploitation of these vulnerabilities. Since publication of these details, Volexity has continued to monitor its existing customers for exploitation. Volexity has also been contacted by multiple organizations that saw signs of compromise by way of mismatched file detections. Volexity has been actively working multiple new cases of organizations with compromised ICS VPN appliances.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.