Ivanti CSA Attacks: CISA & FBI Expose Exploit Chain

The FBI and CISA advisory describes confirmed attacks in which threat actors chained four Ivanti Cloud Service Appliance vulnerabilities (including zero-days) to achieve RCE, exfiltrate admin credentials, and install web shells across multiple organizations; it details two exploit chains (CVE-2024-8963 with CVE-2024-8190/9380 and with CVE-2024-9379), provides IoCs and detection notes, and urges immediate patching and mitigation measures.