As cited
Copy frozen at (site build).
threat intel
9X Surge in Ivanti Connect Secure Scanning Activity
GreyNoise detected a nine-fold increase in suspicious scanning activity targeting Ivanti Connect Secure and Ivanti Pulse Secure VPN systems, with more than 230 unique IP addresses conducting probes against these endpoints. The surge in reconnaissance activity suggests possible coordinated preparation for future exploitation attacks.
Why it matters: Organizations running Ivanti VPN solutions should investigate logs for scanning activity and verify systems are patched, as this reconnaissance surge indicates attackers are actively preparing for exploits.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
9X Surge in Ivanti Connect Secure Scanning Activity
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
9X Surge in Ivanti Connect Secure Scanning Activity
GreyNoise detected a nine-fold increase in reconnaissance scanning targeting Ivanti Connect Secure and Ivanti Pulse Secure virtual private network (VPN) systems, with over 230 unique IP addresses probing endpoints. The spike suggests coordinated reconnaissance activity and potential preparation for future exploitation attempts.
Why it matters: Organizations running Ivanti VPN products need to monitor for follow-on attacks and ensure patches are current, as this scanning surge indicates attackers are actively targeting these systems for potential compromise.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
9X Surge in Ivanti Connect Secure Scanning Activity
GreyNoise detected a nine-fold increase in reconnaissance scanning targeting Ivanti Connect Secure and Ivanti Pulse Secure virtual private network (VPN) systems, with over 230 unique IP addresses probing endpoints. The spike suggests coordinated reconnaissance activity and potential preparation for future exploitation attempts.
Why it matters: Organizations running Ivanti VPN products need to monitor for follow-on attacks and ensure patches are current, as this scanning surge indicates attackers are actively targeting these systems for potential compromise.
- Source published
- First seen by Cybersecurity Tracker