Ivanti的零時差漏洞遭到大規模利用
· 2024-01-16

向Ivanti通報CVE-2023-46805與CVE-2024-21887零時差漏洞的資安業者Volexity指出,隨著1月10日Ivanti公告漏洞資訊之後便開始出現廣泛的攻擊行動,截至1月14日Volexity在全球1,700個受影響的Ivanti Connect Secure(ICS)VPN裝置中發現入侵跡象

Volexity察覺,在Ivanti發布公告之後,開始出現廣泛的攻擊行動。隨後Volexity掃描了全球約5萬個ICS裝置,在本周日偵測到全球有逾1,700臺裝置受到感染,且發現它們似乎是不分青紅皂白成為攻擊目標,受害者遍布全球,且規模差異很大,涵蓋全球政府及軍事部門、國家電信業者、國防承包商、科技業者、金融業者、全球顧問及航太業者等。

對這些受害裝置的分析則顯示,可能有其它的駭客組織正在利用這兩個漏洞,因為許多的操作安全性明顯低於UTA0178。由於Volexity的掃描並未涵蓋已部署Ivanti緩解措施或已離線的裝置,因而推測受到感染的裝置數量應該更多。

Volexity建議ICS用戶最好部署Ivanti所提供的緩解措施,同時執行Ivanti提供的完整性檢查工具。

熱門文章
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Kazakhstan plans to penalise online casino promotions
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
British gambling levy rates confirmed for each vertical
Regulation
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Manila delivers: Highlights from SiGMA Asia 2026 
Southeast Asia
首頁
遊戲
合作
發現
我的