Ivanti Vulnerability Exploited to Install 'DSLog' Backdoor on 670+ IT Infrastructures

Threat actors are leveraging a recently disclosed security flaw impacting Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy a backdoor codenamed DSLog on susceptible devices.
That's according to findings from Orange Cyberdefense, which said it observed the exploitation of CVE-2024-21893 within hours of the public release of the proof-the-concept (PoC) code.

backdoor connect connect secure cve cve-2024-21893 cyberdefense deploy devices exploitation exploited findings flaw gateways install ivanti ivanti connect secure orange orange cyberdefense policy policy secure public release security security flaw threat threat actors vulnerability vulnerability exploited zta zta gateways