CISA emergency directive: Mitigate Ivanti zero-days immediately

**Executive summary:** CISA issued ED 24-01 requiring immediate mitigation and reporting for two Ivanti Connect Secure / Policy Secure zero-days (CVE-2023-46805 and CVE-2024-21887) that are being widely exploited in the wild to deploy webshells/backdoors, steal credentials, move laterally, exfiltrate data, and install cryptominers and other custom malware; thousands of appliances have been exposed or compromised and multiple threat actors — including a suspected Chinese state-backed group — are implicated.