"Federal Agencies Ordered to Disconnect Vulnerable Ivanti Products Within 48 Hours"

Federal civilian agencies have been ordered by the US Cybersecurity and Infrastructure Security Agency to disconnect all network connections to Ivanti VPN software due to three critical vulnerabilities, including two zero-days, that are being actively exploited by threat groups. The directive also includes steps for agencies to detect if their Ivanti VPNs have been compromised and mandates a series of actions to be taken before bringing the products back online. Security firm Volexity reported that at least 2,200 customers of the affected products have been compromised, and they praised the directive as the best way to alleviate concerns about compromised devices.