Researchers say attackers are mass-exploiting new Ivanti VPN flaw

Researchers observed mass exploitation of an Ivanti Connect Secure SSRF vulnerability (CVE-2024-21893) — alongside related CVEs — with thousands of internet-exposed devices, hundreds of unique IPs attempting exploitation, public PoC code, and a CISA directive to disconnect federal Ivanti appliances; patches exist but rollout is staggered and many devices likely remain at risk.