56 Remote Code Execution Vulnerabilities in a Single Year

And ivanti released CVE-2025-0282, just one week into the new year.

11 comments

Hold on, we're not even 10 days into 2025 and there's already an exploit!
"We make corporate software that provides examples of what other companies protect against."
With Ivanti VPN, attackers can transfer your data to the darknet over an encrypted connection.
What are they doing differently that's causing this?
- so strange that there is an increase of cybersecurity issues starting in 2023?
  
  let me ask chatgpt what could have came out, maybe at the end of 2022, to cause this?
  
  Just think how many went unannounced/undisclosed in previous years?
  
  Makes me think of Eternal Blue.
- I have no idea.
Fortinet looks nervously from the sidelines.
- Forti doesn't even come close. But 7 RCE vulnerabilities are still 7 too many.
  
  Where do you find these tables? They're great!

11 comments