Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways

Here is a summary of the provided document:

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding updated guidance on Ivanti Connect Secure and Policy Secure Gateways vulnerabilities (CVE-2024-21888 and CVE-2024-21893). These vulnerabilities could allow a cyber threat actor to take control of an affected system. Ivanti has published software updates and mitigations, and CISA recommends implementing these updates and monitoring networks for signs of compromise. Continuously hunting for threats, monitoring authentication and account usage, and isolating systems are also recommended. Additionally, organizations are urged to review CISA's Emergency Directive and Supplemental Direction for further guidance.