BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Excerpt from the primary source: Dark Reading
Who is affected
Enterprises · Security professionals
Affected technology: Cisco networking & security, Ivanti Connect Secure / EPMM, PAN-OS / GlobalProtect
Why it matters
There are signs this may already be exploited, which usually shortens the time available to patch.
Automated: stated only from CISA listings and the exploitation evidence in the sources below.
What you should do · Review
Review whether your organization uses PAN-OS / GlobalProtect, Ivanti Connect Secure / EPMM and Cisco networking & security and assess exposure using the linked advisories.
Automated guidance based on this story's classification. Check the linked advisories for specifics.
Sources
We link to original and authoritative sources. Headlines and excerpts belong to their publishers.
Related
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
Source reporting says attackers are already exploiting this, so exposed PAN-OS / GlobalProtect systems are at immediate risk.
Treat this as an emergency.
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges.
Source reporting says attackers are already exploiting this, so exposed Cisco networking & security systems are at immediate risk.
Treat this as an emergency.
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.
Source reporting says attackers are already exploiting this, so exposed Ivanti Connect Secure / EPMM systems are at immediate risk.
Treat this as an emergency.
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
Source reporting says attackers are already exploiting this, so exposed Ivanti Connect Secure / EPMM systems are at immediate risk.
Apply the vendor's security update for Ivanti Connect Secure / EPMM.