CISA Issues Emergency Directive on Ivanti Vulnerabilities

Here is a short summary of the provided document:

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive (ED) 24-01 to mitigate active vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure products. The directive requires all Federal Civilian Executive Branch (FCEB) agencies to implement mitigations, report indications of compromise, and remove compromised products from networks. Additionally, agencies must apply updates within 48 hours of their release and provide a report to CISA. While only applicable to FCEB agencies, CISA encourages all organizations to address the vulnerabilities.