The Mass Exploitation of Ivanti Connect Secure
ID: 2d982ea1-2272-514e-8f80-d48472b58d77
STIX ID: report--2d982ea1-2272-514e-8f80-d48472b58d77
Feed Name: Censys Blog
Threat Score
Date Published: 2024-01-23
Date Updated: 2026-04-27
Author: Brenda Mendoza; The Censys Research Team
...
...
Censys details mass exploitation of Ivanti Connect Secure/Policy Secure vulnerabilities (CVE-2023-46805 and CVE-2024-21887) enabling unauthenticated RCE and credential theft; scans found 26,095 exposed Connect Secure hosts and 412 with a backdoored JavaScript exfiltrating usernames/passwords, prompting CISA Emergency Directive 24-01 and vendor mitigation/patch guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.