CISA Issues Emergency Directive For Ivanti Flaws, Warns of ‘Widespread Exploitation’

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday gave federal agencies a hard deadline to implement mitigations for two Ivanti vulnerabilities and warned that it is seeing “widespread exploitation” of the flaws.

CISA on Friday ordered federal agencies to download and import “mitigation.release.20240107.1.xml,” via Ivanti’s download portal, into any impacted products “as soon as possible and no later than 11:59 pm EST” on Monday, Jan. 22. CISA also directed agencies to download and run Ivanti’s External Integrity Checker …

agency cisa cybersecurity download emergency emergency directive exploitation federal federal agencies flaws hard import infrastructure infrastructure security ivanti mitigation mitigations portal release security vulnerabilities xml