CISA issues warning about another Ivanti flaw under active attack

CISA warns that a remote code execution vulnerability (CVE-2024-29824) in Ivanti Endpoint Manager — patched in May — is being actively exploited against unpatched systems; federal agencies were ordered to remediate by October 23 and Ivanti confirmed a limited number of customer compromises, while the report also recalls prior Ivanti product exploitations linked to China-backed actors.