The Register: ‘Ongoing’ Ivanti hijack bug exploitation reaches clouds

May 21, 2025

—

Source URL: https://www.theregister.com/2025/05/21/ivanti_rce_attacks_ongoing/
Source: The Register
Title: ‘Ongoing’ Ivanti hijack bug exploitation reaches clouds

Feedly Summary: Nothing like insecure code in security suites
The “ongoing exploitation" of two Ivanti bugs has now extended beyond on-premises environments and hit customers’ cloud instances, according to security shop Wiz.…

AI Summary and Description: Yes

Summary: The text highlights security vulnerabilities within Ivanti’s software that are affecting both on-premises and cloud environments. This is particularly relevant for professionals focused on cloud computing security and information security.

Detailed Description: The text discusses the serious implications of identified security flaws in Ivanti’s products, which security researchers at Wiz have noted as being exploited actively. This situation underscores the risks associated with software security, particularly in the context of cloud environments.

– **Key Points:**
– Two specific bugs in Ivanti’s software are being actively exploited, indicating a significant vulnerability.
– The exploitation has crossed the boundaries of on-premises environments to impact customers using cloud services.
– This development raises concerns regarding how security measures are implemented in both cloud and traditional infrastructure settings.

Overall, the text reinforces the importance of addressing software vulnerabilities to protect both on-premise and cloud-based infrastructures, highlighting a pressing issue for security and compliance professionals who need to ensure robust safeguards are in place against such ongoing threats.

1 2 2025 5 a Act AI and anti Arch art as attack attacks AWS based based infrastructure being beyond Bi Bug bugs C CERN CI CIA Cloud cloud computing cloud computing security cloud environment cloud environments cloud instances cloud service cloud services cloud-based cloud-based infrastructure co code compliance compliance professionals Computing concerns Context core cross Customer D de development e end environment exp exploit Exploitation eXtended flaws focused for g GIS Go gs H high Highlight HR http HTTPS implications in information information security infrastructure infrastructures insecure code Iron issue ite Ivanti J jack k Key l law led Li M measures N NGO no nothing o of on OPM oS over point pre premises premises environments product products professionals Q R Raise RCE research researchers Risk risks Ro RoT s safe safeguards search sec secure security security and compliance Security Flaw security flaws security measure security measures Security Research Security Researcher security researchers Security Vulnerabilities service services settings Sig SoC software software security software vulnerabilities source specific SSE SSO structures T text the threat threats to TP two UI under US use V vulnerabilities vulnerability Ware Wi Wiz x