Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability

Advanced persistent threat (APT) actors exploited a recently disclosed critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) as a zero-day since at least April 2023 in attacks directed against Norwegian entities, including a government network.
The disclosure comes as part of a new joint advisory released by the Cybersecurity and Infrastructure Security Agency (CISA) and the Norwegian

advanced advanced persistent threat advisory april apt attacks critical critical flaw cybersecurity disclosure endpoint entities epmm exploited exploiting flaw government ivanti ivanti epmm manager mobile network persistent persistent threat threat vulnerability zero-day