Ivanti Connect (in)Secure
ID: c8d7ccb1-7119-54f5-8108-e78bb3d3141f
STIX ID: report--c8d7ccb1-7119-54f5-8108-e78bb3d3141f
Feed Name: Censys Blog
Threat Score
Censys reports ~24,590 exposed Ivanti Connect Secure gateways (as of 2024-02-19) with ~6,000 showing versions potentially vulnerable to recent high-severity CVEs; additionally, researchers uncovered a large, automated honeypot/deception campaign (primarily on AWS) that generated thousands of fake Connect Secure instances using patterned, auto-generated TLS certificate common names and multiple ports, artificially inflating exposure metrics and complicating remediation efforts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.