Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor

### Executive summary The report details active exploitation of an SSRF zero-day (CVE-2024-21893) in Ivanti Connect Secure/Policy Secure/ZTA appliances that allowed attackers to inject a DSLog backdoor enabling remote root command execution; Orange Cyberdefense found ~700 compromised servers, evidence of log tampering, and a per-device SHA256-based webshell authentication mechanism, and it references Ivanti patches and mitigation guidance.