CISA, FBI issue advisory detailing threats impacting outdated Ivanti cloud products

The Cybersecurity and Infrastructure Security Agency and the FBI have issued a joint cybersecurity advisory on vulnerabilities exploited in outdated Ivanti cloud products and indicators of compromise to help network operators defend their systems.

“According to CISA and trusted third-party incident response data, threat actors chained the listed vulnerabilities to gain initial access, conduct remote code execution (RCE), obtain credentials, and implant webshells on victim networks,” the Wednesday advisory says.

Ivanti is a software company offering cloud services to...