Hackers Exploit Ivanti Endpoint Manager Flaw—Are You at Risk?

CISA has warned of active exploitation of a critical unauthenticated remote code execution vulnerability in Ivanti Endpoint Manager (CVE-2024-29824). Ivanti released a patch (replacing five DLLs and requiring a core server restart or IISRESET) and CISA added the flaw to its Known Exploited Vulnerabilities catalog with a remediation deadline, but many organizations remain unpatched and some customers have been targeted.