China-backed Espionage Group Exploits Ivanti Vulnerabilities
CybersecurityResearchThreatsChinaCISACybersecurity and Infrastructure Security AgencyEspionageExploitGoogle Threat Intelligence GroupIvantiKnown Exploited Vulnerabilities (KEV)MandiantVulnerability
The China-backed espionage group, UNC5221, has exploited at least four vulnerabilities in Ivanti products since 2023, according to Mandiant. These exploits target Ivanti's customers, highlighting a continuing trend of attacks against the company. The specific technical details of the exploited vulnerabilities are not mentioned in the article. The impact of these attacks is not specified, but they underscore the group's persistence in exploiting Ivanti's security flaws.