Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks
Cybersecurity researchers have disclosed details of a new malware
called MDifyLoader that has been observed in conjunction with cyber
attacks exploiting security flaws in Ivanti Connect Secure (ICS)
appliances. According to a report published by JPCERT/CC today, the
threat actors behind the exploitation of CVE-2025-0282 and
CVE-2025-22457 in intrusions observed between December 2024 and
July
Read more https://thehackernews.com/2025/07/ivanti-zero-days-exploited-to-drop.html