China-Nexus Exploits Ivanti EPMM CVE-2025-4428

~Eclecticiq~
UNC5221 actively exploits Ivanti EPMM (CVE-2025-4428) for RCE & data exfil.
-
IOCs: 64. 52. 80. 21, 103. 244. 88. 125, 27. 25. 148. 183
-
#CVE20254428 #Ivanti #ThreatIntel #UNC5221

Ivanti patches two 0-days and a critical make-me-admin bug : Vendor says vulns are linked with 2 mystery open source libraries integrated into EPMM product

#Ivanti patches two zero-days under active attack as intel agency warns customers
www.theregister.com/2025/05/14/i...

#AustralianSignalsDirectorate issues critical warning about #CVE20254427 (5.3) & #CVE20254428 (7.2).
#CyberSecurity #InfoSec #Vulnerability #ZeroDay #0Day #ASD