Ivanti VPN Flaw Exploited to Inject Novel Backdoor; Hundreds Pwned

Researchers observed a mass-exploitation campaign against recently disclosed Ivanti VPN vulnerabilities (notably CVE-2024-21893) resulting in a novel backdoor named "DSLog" being implanted in appliances and compromising over 670 IT infrastructures; the backdoor uses per-appliance hashes and an API-key control mechanism that makes detection difficult. Analysts recommend factory resets, full patching where available, and applying XML mitigations as a stopgap for unpatched appliance versions.