Ivanti Breach Prompts CISA to Take Systems Offline

CISA reported that threat actors exploited multiple Ivanti Connect/Policy Secure gateway vulnerabilities to breach agency systems in February, prompting the takedown of two systems for investigation. The attackers were able to steal credentials from Ivanti devices and, in some incidents, obtain full domain compromise; CISA has not confirmed the full scope of data access or the identities of the intruders, and organizations are urged to review Ivanti advisories and incident response plans.