Ivanti has issued an urgent security advisory concerning a critical remote code execution (RCE) vulnerability, identified as CVE-2025-0282, in its Connect Secure product. This zero-day flaw has been actively exploited by threat actors to compromise systems, prompting immediate action from organizations utilizing this technology. Ivanti became aware of the exploitation through its Integrity Checker Tool (ICT), which detected malicious activity on customers’ appliances. Subsequent investigations confirmed that threat actors have been actively leveraging CVE-2025-0282 in zero-day attacks to install malware on vulnerable devices. Notably, the same advanced persistent threat (APT)…
Read More