Ivanti warns of new EPMM flaw exploited in zero-day attacks

A high-severity remote code execution vulnerability in Ivanti's Endpoint Manager Mobile (EPMM) is being exploited in zero-day attacks, prompting the company to urge customers to apply a patch. The flaw allows attackers to execute arbitrary code, potentially leading to a complete compromise of the affected system. Ivanti has issued a warning to its customers, emphasizing the need for immediate action to mitigate the vulnerability. The fact that the vulnerability is being exploited in zero-day attacks means that defenders are already at a disadvantage, as the attacks are occurring before patches have been developed¹. This underscores the importance of prompt patch management and highlights the challenges of keeping pace with emerging threats. The exploitation of this vulnerability has significant implications for organizations relying on Ivanti's EPMM, as it can lead to unauthorized access and data breaches, so practitioners must prioritize patching to prevent potential attacks.