CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday

A critical-severity vulnerability in Ivanti Endpoint Manager Mobile has been exploited by attackers since January, prompting the Cybersecurity and Infrastructure Security Agency to issue a directive to US government agencies to patch the flaw by the upcoming Sunday. The affected systems are required to be secured within a four-day timeframe to prevent further exploitation. The vulnerability, which affects Ivanti EPMM, poses a significant risk to the security of government systems. CISA's directive underscores the urgency of addressing the vulnerability, given its exploitation in recent attacks¹. The agency's order highlights the need for swift action to mitigate potential threats. This vulnerability poses a significant risk to the security of government systems, and its exploitation could have severe consequences. The swift patching of this vulnerability is crucial for preventing attackers from gaining unauthorized access to sensitive information, so patching this flaw is essential for maintaining the security and integrity of government systems.