Latest Ivanti bug, paired with malware, earns an alert from CISA

**Executive Summary:** CISA reports that suspected China-linked espionage actors have actively exploited Ivanti CVE-2025-0282 to deploy Resurge (aka Spawn) malware on Connect Secure and related appliances; the malware enables persistence, credential theft, account creation, privilege escalation, log tampering, and bypass of Ivanti integrity checks, prompting agency guidance to factory-reset devices and rotate credentials.