I'd initially made a bet that we wouldn't see network edge 0day dropped until next week, but alas, I lost! New Ivanti Connect Secure 0day CVE-2025-0282 exploited in the wild ("limited" exploitation, according to the vendor). Threat campaign analyses likely coming soon. https://www.rapid7.com/blog/post/2025/01/08/etr-cve-2025-0282-ivanti-connect-secure-zero-day-exploited-in-the-wild/
Comments