CISA warns of active exploitation of Ivanti vulnerability affecting customers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a vulnerability in Ivanti Endpoint Manager that is currently being exploited by hackers. This flaw, identified as CVE-2024-29824, allows attackers to run malicious code on unpatched systems. Ivanti had previously fixed this vulnerability in May, but CISA reports that it is now being actively used against a limited number of Ivanti customers. The agency has mandated that federal civilian agencies update their systems by October 23 to prevent exploitation. Ivanti has acknowledged the active exploitation of this flaw but has not disclosed how many customers have been affected or if any data has been stolen. The company has faced similar issues in the past, with hackers exploiting vulnerabilities in its Connect Secure product earlier this year.