CISA Alerts on RESURGE Malware Exploiting Ivanti Connect Secure Zero-Days

**CISA Malware Analysis Report (RESURGE):** CISA documents a new malware family, RESURGE, actively exploiting the Ivanti Connect Secure CVE-2025-0282 zero-day to achieve persistent, stealthy access—modifying coreboot, dropping web shells, and enabling credential theft, account creation, password resets and privilege escalation—and provides YARA/SIGMA detection rules plus remediation guidance (factory resets, credential resets, and Ivanti recovery steps).