Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

There's yet another group of miscreants out there hijacking insecure Ivanti devices: A new, financially motivated gang dubbed Magnet Goblin has emerged from the shadowy digital depths with a knack for rapidly exploiting newly disclosed vulnerabilities before vendors have issued a fix. The cybercrime crew has targeted US …

[nijam]

> "vulnerable Ivanti Connect Secure VPN"

There in a nutshell, a phrase that summarises the state of IT "security" .

[Michael Wojcik]

A day after the public PoC...

... is not particularly fast. We have scads of new 0days every year, and it seems wildly unlikely that various groups hadn't penetrated a high-value target like Secure VPN long ago.