CISA spots spawn of Spawn malware targeting Ivanti flaw

CISA has released a malware analysis for "Resurge", a strain associated with the Spawn Chimera family that exploits CVE-2025-0282 to achieve unauthenticated remote code execution against Ivanti Connect Secure, Policy Secure, and Neurons for ZTA gateways. Resurge installs web shells, bypasses integrity checks, harvests credentials, creates accounts, resets passwords, and escalates privileges; CISA and Ivanti advise factory resets, reinstalling patched firmware, and resetting all privileged and domain account passwords (including resetting krbtgt twice) to ensure remediation.