Skip to main content

Critical flaws in Ivanti EPMM lead to fast-moving exploitation attempts

Quote card featuring Errol Weiss, Chief Security Officer, on Health-ISAC threat guidance for Ivanti EPMM flaws.

Security researchers warn that the initial threat activity was highly targeted, as a limited number of users were impacted prior to disclosure.

Security teams are scrambling Tuesday as two critical vulnerabilities in Ivanti Endpoint Manager Mobile are facing exploitation attempts.

Health-ISAC pullout quotes:

The Health Information Sharing and Analysis Center (Health-ISAC) has identified a small number of organizations with potential exposure and has sent them targeted information with mitigation guidance, according to chief security officer Errol Weiss.

“This vulnerability is actively being exploited, and any organization using Ivanti EPMM should treat it as a high-priority patch and monitor it closely,” Weiss told Cybersecurity Dive. “Even when exposure is narrow, the systems involved are often critical to enterprise operations, so rapid remediation and heightened vigilance are essential.”

Read the article in Cybersecurity Dive. Click Here

 

Dartmouth Health’s Plummer Says Lack of Granular Tech Inventory Still an Issue
Health-ISAC reports 55% surge in cyber incidents in 2025