endpoint management

PoC exploit for Ivanti Endpoint Manager vulnerabilities released (CVE-2024-13159)

February 24, 2025

A proof-of-concept (PoC) exploit for four critical Ivanti Endpoint Manager vulnerabilities has been released by Horizon3.ai researchers. The vulnerabilities – …

Microsoft asks Windows Insiders to try out the controversial Recall feature

November 25, 2024

Participants of the Windows Insider Program that have a Qualcomm Snapdragon-powered Copilot+ PC can now try out Recall, the infamous snapshot-taking, AI-powered feature that …

Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824)

October 3, 2024

CVE-2024-29824, an unauthenticated SQL Injection vulnerability in Ivanti Endpoint Manager (EPM) appliances, is being exploited by attackers, the Cybersecurity and …

Ivanti fixes critical vulnerabilities in Endpoint Management (CVE-2024-29847)

September 11, 2024

Ivanti has fixed a slew of vulnerabilities affecting its Endpoint Manager solution, including a maximum severity one (CVE-2024-29847) that may allow unauthenticated attackers …

PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)

May 20, 2024

Technical details about and a proof-of-concept (PoC) exploit for CVE-2024-22026, a privilege escalation bug affecting Ivanti EPMM, has been released by the …

Critical FortiClient EMS vulnerability fixed, (fake?) PoC for sale (CVE-2023-48788)

March 14, 2024

A recently fixed SQL injection vulnerability (CVE-2023-48788) in Fortinet’s FortiClient Endpoint Management Server (EMS) solution has apparently piqued the interest of …

Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)

January 19, 2024

A previously patched critical vulnerability (CVE-2023-35082) affecting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core is being actively exploited, the Cybersecurity …

Best practices to mitigate alert fatigue

January 17, 2024

In this Help Net Security video, Peter Manev, Chief Strategy Officer at Stamus Networks, discusses a pervasive problem plaguing security analysts called “alert fatigue,” – …

Ivanti discloses another vulnerability in MobileIron Core (CVE-2023-35082)

August 3, 2023

Ivanti has disclosed a critical vulnerability (CVE-2023-35082) affecting old, out-of-support versions of MobileIron Core, an enterprise device solution that has since been …

Ivanti fixes second zero-day exploited by attackers (CVE-2023-35081)

July 31, 2023

Another actively exploited zero-day vulnerability (CVE-2023-35081) affecting Ivanti Endpoint Manager Mobile (EPMM) has been identified and fixed. The first zero-day spotted …

Ivanti zero-day exploited to target Norwegian government (CVE-2023-35078)

July 25, 2023

A zero-day vulnerability (CVE-2023-35078) affecting Ivanti Endpoint Manager Mobile (EPMM) has been exploited to carry out an attack that affected 12 Norwegian ministries, the …

Endpoint security getting easier, but most organizations lack tool consolidation

February 10, 2023

IT and security teams are consolidating management and security functions to help better deliver new applications to end users, improve regulatory compliance, and reduce …