{"uuid": "adc5c6cc-62cf-42fa-8c5c-2d555ed491c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0282", "type": "exploited", "source": "https://t.me/thehackernews/6137", "content": "\ud83d\udd25 Critical Ivanti Flaw Under Attack! \n \nHackers are actively targeting CVE-2025-0282\u2014a buffer overflow flaw (CVSS 9.0)\u2014in Ivanti Connect Secure, Policy Secure, and ZTA Gateways. \n \nMandiant links this to China-linked actors (UNC5337) using novel tools like DRYHOOK for credential theft. \n \n\u2937 Federal agencies must patch by January 15, 2025. \n\u2937 Organizations worldwide are at risk of breaches. \n \n\ud83d\udc49 Learn more here: https://thehackernews.com/2025/01/ivanti-flaw-cve-2025-0282-actively.html", "creation_timestamp": "2025-01-09T05:53:49.000000Z"}