UNC5221 and The Targeting of Ivanti Connect Secure VPNs

The Defender's Advantage Podcast

Content provided by Mandiant and FireEye Inc. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mandiant and FireEye Inc or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.

2M ago 27:55

MP3•Episode home

Matt Lin (Senior Incident Response Consultant, Mandiant) and Daniel Spicer (Chief Security Officer, Ivanti) dive into the research and response of UNC5221's campaigns against Ivanti. They cover how this threat actor has evolved from earlier campaigns, the continued focus of edge infrastructure by APT actors, and the shared responsibility of security in mitigating threats like this.

https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-exploiting-critical-ivanti-vulnerability

https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day

https://www.ivanti.com/blog/an-update-on-ivantis-ongoing-commitment-to-enhanced-product-security

https://www.ivanti.com/resources/secure-by-design/2024

https://cloud.google.com/blog/topics/threat-intelligence/2024-zero-day-trends?e=48754805

186 episodes

#Cyber #Cybersecurity #Security #Tech #Software Development #Threat Intelligence #Cyber Threats #Threat Landscape #Threat Intel #Mandiant #FireEye