January blues return as Ivanti coughs up exploited EPMM zero-days

Ivanti patched two critical unauthenticated RCE zero-days in Endpoint Manager Mobile (CVE-2026-1281 and CVE-2026-1340, CVSS 9.8) that are being exploited in the wild; the vendor reports a small number of confirmed compromises, provides detection guidance (review Apache access logs, look for suspicious GET/POST requests, unexpected 404s vs 200s, web shells, and unexpected WAR/JAR files or outbound connections) and recommends applying patches, restoring from backups or rebuilding impacted systems.