Alerts: Ivanti Releases Security Updates for Multiple Products

Source URL: https://www.cisa.gov/news-events/alerts/2024/12/10/ivanti-releases-security-updates-multiple-products
Source: Alerts
Title: Ivanti Releases Security Updates for Multiple Products

Feedly Summary: Ivanti released security updates to address vulnerabilities in Ivanti Cloud Service Application, Ivanti Desktop and Server Management (DSM), Ivanti Connect Secure and Police Secure, Ivanti Sentry, and Ivanti Patch SDK.
CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates:

Ivanti Cloud Service Application
Ivanti Desktop and Server Management (DSM)
Ivanti Connect Secure and Policy Secure
Ivanti Sentry
Ivanti Patch SDK (This also affects Ivanti Endpoint Manager (EPM), Ivanti Security Controls, Ivanti Neurons Agent, Ivanti Neurons for Patch Management, and Ivanti Patch for Configuration Manager.)

AI Summary and Description: Yes

Summary: The text discusses security updates released by Ivanti to address vulnerabilities in various Ivanti products. This is particularly relevant for security and compliance professionals focused on infrastructure security, information security, and cloud computing security as it highlights the importance of timely updates and vulnerability management.

Detailed Description:

The provided text emphasizes Ivanti’s proactive approach to cybersecurity by releasing security updates for its various products. This update is crucial for organizations utilizing Ivanti’s solutions to manage security risks effectively.

– **Affected Products**: The security updates concern several Ivanti products:
– Ivanti Cloud Service Application
– Ivanti Desktop and Server Management (DSM)
– Ivanti Connect Secure and Policy Secure
– Ivanti Sentry
– Ivanti Patch SDK (also impacts Ivanti Endpoint Manager, Ivanti Security Controls, Ivanti Neurons Agent, Ivanti Neurons for Patch Management, and Ivanti Patch for Configuration Manager)

– **CISA’s Role**: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the relevant Ivanti security advisories. This illustrates the collaboration between private sector software providers and government entities to enhance security posture.

– **Significance**:
– **Vulnerability Management**: Regular updates are vital for mitigating potential security threats and maintaining compliance with industry standards.
– **User Awareness**: Encouraging users to stay informed about software vulnerabilities is part of a broader security culture that can significantly reduce risks.

Considering the ongoing cyber threats, the prompt highlights the importance of immediate action to apply necessary guidance and updates, ensuring that organizations remain secure against vulnerabilities that could be exploited. Security professionals should view such advisories as critical to maintaining their infrastructure’s integrity and compliance status.