Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

Five Eyes agencies warn that multiple high-severity vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure appliances are being actively exploited to deploy malware and potentially achieve rootkit-level persistence; vendors and researchers (Mandiant, Akamai) report large-scale probing and deployment (including an encrypted BUSHWALK sample placed in excluded ICT directories), while Ivanti has released patches and an updated Integrity Checker Tool but agencies recommend treating affected devices as high risk.