Ivanti Connect Secure (formerly Pulse Secure)

EXECUTIVE INTELLIGENCE SUMMARY

SSL VPN gateway and Zero Trust network access appliance safeguarding corporate perimeters and remote employee sessions.

Widely targeted by nation-state actors (notably Volt Typhoon and UNC5221) using authentication bypass chains and server-side request forgery (SSRF) zero-days to harvest active user sessions and deploy persistent web shells.

SOURCE CITATIONS & ATTESTATIONS (1)

CISA Emergency Directive on Ivanti AppliancesCISA

Mitigating Ivanti Connect Secure Zero-Day Vulnerabilities

TELEMETRY CARDID: software-ivanti-connect-secure

ENTITY TYPE

software

INDEXED TAGS

#vpn_gateway#edge_device#perimeter#web_shells

CONNECTED ENTITIES (2)VIEW IN GRAPH →