CISA warns that RESURGE malware can be dormant on Ivanti devices

By Bill Toulas

AI Summary

CISA released details about RESURGE malware used in zero-day attacks exploiting CVE-2025-0282 against Ivanti Connect Secure devices. The malicious implant can remain dormant on compromised systems, allowing persistent access even after apparent remediation efforts by administrators.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 92.0/100

# More from February 28

1
Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access The Hacker News
2
APT37 hackers use new malware to breach air-gapped networks BleepingComputer
4
900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks The Hacker News
5
Europol-led crackdown on The Com hackers leads to 30 arrests BleepingComputer
6
Google quantum-proofs HTTPS by squeezing 2.5kB of data into 64-byte space Ars Technica Security
7
DoJ Seizes $61 Million in Tether Linked to Pig Butchering Crypto Scams The Hacker News
8
Ukrainian man pleads guilty to running AI-powered fake ID site BleepingComputer
9
New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises Ars Technica Security
10
Ransomware payment rate drops to record low despite attack surge BleepingComputer