Ivanti Zero-Days, Rust Rewrites Malware Loaders, and Fresh CVEs Flood the Queue

News

Ivanti Patches Critical EPMM Flaws Already Being Exploited

Two chained vulnerabilities in Ivanti Endpoint Manager Mobile let attackers go from auth bypass to remote code execution with zero creds needed. If you run EPMM on-prem, patch today, this is the kind of bug that ends up in a CISA KEV notice within the week.

Fake Recruiter Emails Deliver Infostealers to Job Seekers

Attackers are impersonating recruiters with fake job offers that drop credential-stealing malware, targeting a population that's primed to click links and download attachments without thinking twice. Worth a reminder to your team, especially anyone active on LinkedIn right now.

Tools

Nuclei Ships New Template Pack for Faster Vuln Triage

ProjectDiscovery keeps shipping templates that map directly to the latest disclosed CVEs, which is exactly what you want for automated scanning at scale. If you're not running nuclei in your recon pipeline you're leaving free coverage on the table.

Analysis

Chinese State Actors Expand Targeting of OT and Critical Infrastructure

This isn't new behavior but the scope keeps widening, hitting water systems, energy grids, and manufacturing OT networks that often run decade-old unpatched software. If you're in critical infra, segmentation between IT and OT is no longer optional, it's table stakes.