Cybersecurity firm Mandiant has discovered a zero-day vulnerability in Ivanti Connect Secure VPN appliances being exploited by a potential China-linked cyber-espionage group. With no clear attribution to a specific threat actor, the security flaw has been actively used since December 2024. The vulnerability enables attackers to execute remote code, move within networks and install persistent backdoors. Mandiant suggests that multiple threat actors might be involved and recommends affected users to execute a factory reset to mitigate risks.
Major Cyber Attacks in Review: December 2024
In December 2024, multiple cyber attacks targeting various sectors were reported. Notably, ransomware groups like Black Basta and Cl0P, as well as state-sponsored hackers including
