Ivanti Exploitation Surges as Zero-Day Attacks Traced Back to July 2025
Source SecurityWeek
Rated High by Threat Radar from the SecurityWeek text
Data as of 20 Feb 2026, 22:49 UTC
What to do
AI-suggested
Organizations should immediately enhance monitoring of Ivanti product environments for unusual shell activity and network reconnaissance behaviors. Network segmentation should be enforced to isolate Ivanti management interfaces from general user networks and restrict access to trusted administrators only. Deploy intrusion detection and prevention systems tuned to detect Ivanti-related anomalies. Conduct thorough audits of Ivanti software versions and configurations to identify potential exposure. Prepare for rapid deployment of vendor patches once released by maintaining close communication with Ivanti and monitoring security advisories. Implement multi-factor authentication for all Ivanti management access points to reduce unauthorized exploitation risk. Regularly back up critical configuration and data to enable recovery in case of compromise. Finally, conduct targeted threat hunting exercises focusing on indicators of compromise related to remote shell deployment and malware downloads within Ivanti-managed environments.
Description
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware. The post Ivanti Exploitation Surges as Zero-Day Attacks Traced Back to July 2025 appeared first on SecurityWeek .