criticalGlobalMultiUNC5221
Impact
Ribuan organisasi terkompromikan; CISA emergency directive.
Initial vector
Ivanti CS 0-day (UTA0178)
Lessons learned
- Edge appliance hardening
- ICT
- Out-of-band mgmt
Rangkaian zero-day Ivanti dieksploitasi aktor China sepanjang Q1 2024.