Ivanti has patched a critical flaw in its Connect Secure VPN reportedly exploited by Chinese state-backed actors. Identified as CVE-2025-22457, the buffer overflow vulnerability was linked to remote code execution attacks using two new malware variants: TRAILBLAZE and BUSHFIRE. Research firm Mandiant advised Ivanti users to upgrade their systems as the threat persists. Ivanti confirmed that their Integrity Checker Tool has successfully detected potential compromises in certain client systems.
Changes Made to Leapfrog’s Hospital Survey Design
The Leapfrog Group, a US non-profit representing hospital performance interests, has revised its 2025 Leapfrog Hospital Survey, incorporating over 800 public comments. Changes include updated
