Linkedin Ivanti Vulnerabilities Exploited via Single IP Address
Article Content
Browse articles 
Two vulnerabilities in Ivanti Endpoint Manager Mobile (CVE-2026-21962 and CVE-2026-24061) have been flagged as actively exploited in zero-day attacks. A single IP address is responsible for over 83% of exploitation activity related to these vulnerabilities, as reported by GreyNoise. Ivanti has released hotfixes to address these issues.
Ask AI about this cluster
Answers cite the sources they use
Updated 221d ago How this analysis works
Timeline
2026-01-20
CVE-2026-21962 published
2026-01-21
CVE-2026-24061 published
2026-01-21
First public PoC for CVE-2026-24061
2026-01-22
First public PoC for CVE-2026-21962
2026-01-26
CVE-2026-24061 added to CISA KEV (active exploitation)
2026-02-16
Ivanti announces hotfixes for the vulnerabilities
More articles in this cluster (2)
Following this threat?
Track Ivanti and CVE-2026-21962 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
ShinyHunters Hack Exposes Sensitive FBI Employee Data On September 23, 2026, the FBI disclosed an investigation into a data breach by the hacking group ShinyHunters, which claims to have stolen sensitive personal information of approximately 38,000 FBI employees and job applicants. The stolen data reportedly includes names, addresses, phone numbers, Social Security… 
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…