CISA Issues Emergency Directive Requiring Federal Agencies to Mitigate Ivanti Connect Secure and Policy Secure Vulnerabilities

Here is a summary of the provided document:

Summary:

On January 19, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) issued Emergency Directive 24-01 to address widespread exploitation of vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure appliances by malicious actors. The Directive requires federal civilian agencies to take immediate action and implement vendor mitigation guidance to these affected appliances. CISA urges all organizations using these products to implement the mitigations outlined in the Directive to reduce the risk of compromise of agency information systems.