Vendor
ESET APT Activity Report Q4 2025–Q1 2026 Highlights Various Threat Actor Campaigns
2 rules 3 TTPsESET's APT Activity Report for Q4 2025 and Q1 2026 highlights diverse campaigns by China, Iran, North Korea, and Russia-aligned threat actors, including espionage, supply chain compromise, and destructive attacks.
Ivanti Secure Access Client: Local Privilege Escalation Vulnerabilities
2 rules 1 TTPA local attacker can exploit vulnerabilities in Ivanti Secure Access Client to manipulate files or escalate privileges, potentially gaining elevated access to the system.
Ivanti Addresses Multiple Vulnerabilities in Various Products
2 rules 4 CVEsIvanti released security advisories on May 12, 2026, to address vulnerabilities in Xtraction, Endpoint Manager (EPM), Virtual Traffic Manager (vTM), and Secure Access Client (Windows), urging users to apply necessary updates to mitigate potential risks from CVE-2026-8043, CVE-2026-8051, CVE-2026-7431, and CVE-2026-7432.
Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile
2 rules 4 TTPsMultiple vulnerabilities in Ivanti Endpoint Manager Mobile allow an attacker to gain administrator privileges, execute arbitrary code with administrator privileges, bypass security measures, manipulate data, and disclose sensitive information.
Ivanti EPMM Authenticated Remote Code Execution Vulnerability Exploited
2 rules 4 TTPs 1 CVECVE-2026-6973, an authenticated remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM), is being actively exploited, potentially leading to data breaches and system compromise.