#Fresh patch Patch
#Fresh patch full
#Fresh patch software

The full extent of the fallout from this zero-day remains to be seen, but many more organizations could be at risk if patches are not applied. Norway’s NSM confirmed that it had notified the Norwegian Data Protection Authority (DPA) about the attack targeting government ministries, suggesting that hackers may have exfiltrated sensitive data from compromised systems. In a short public-facing alert, Ivanti confirmed that it is “aware of a very limited number of customers that have been impacted.” When asked by TechCrunch, the company declined to say exactly how many customers have been impacted or whether it has seen any evidence of data exfiltration as a result of the attacks. At the time of writing, Ivanti’s Knowledge Base article about the vulnerability still requires users to login before viewing. However, Ivanti initially kept details of the flaw - which has been given a maximum vulnerability severity rating out 10 out of 10 - behind a paywall, and reportedly asked potentially impacted customers to accept non-disclosure terms before sharing details.

#Fresh patch Patch

In a statement to TechCrunch, Ivanti chief security officer Daniel Spicer said that after the company became aware of the vulnerability, it “immediately developed and released a patch and are actively engaging with customers to help them apply the fix,” adding that “we are upholding our commitment to deliver and maintain secure products, while practicing responsible disclosure protocols.” cybersecurity agency CISA warned that attackers could create an EPMM administrative account, enabling them to make further changes to a vulnerable system.

In an alert published on Monday, the U.S.

#Fresh patch software

If exploited, the vulnerability allows anyone over the internet to remotely access the software - without needing credentials - to access users’ personal information, such as names, phone numbers and other mobile device details for users on a vulnerable system, as well as make changes to the impacted server. The vulnerability, tracked as CVE-2023-35078, is an authentication bypass flaw that affects all supported versions of Ivanti’s EPMM software, along with older and unsupported releases.

Ivanti’s EPMM allows authorized users and devices to access a corporate or government network. Sofie Nystrøm, director general of Norway’s NSM, said the government couldn’t initially disclose the vulnerability due to “security reasons,” noting that the security flaw was discovered for the “first time here in Norway.” However, the Norwegian National Security Authority (NSM) later confirmed that hackers had leveraged the previously undiscovered flaw in Ivanti Endpoint Manager Mobile (EPMM formerly MobileIron Core), to compromise Norwegian government agencies.

The DSS said the attack was the result of a “previously unknown vulnerability in the software of one of our suppliers,” but didn’t share any further details. The Norwegian government did not name the affected ministries, but the DSS confirmed several offices were unaffected, including Norway’s Prime Minister’s Office, the Ministry of Defense, the Ministry of Justice and the Ministry of Foreign Affairs. The Norwegian Security and Service Organization (DSS) said in a statement on Monday that a “data attack” had struck the IT platform used by 12 government ministries. Hackers exploited a zero-day flaw in Ivanti’s mobile endpoint management software to compromise a dozen Norwegian government agencies - and thousands of other organizations could also be at risk.