Federal agencies have less than 24 hours to disconnect Ivanti VPN appliances due to the risk of malicious exploitation caused by multiple software flaws. On Wednesday, U.S. cybersecurity agency CISA blasted out an updated emergency directive ordering U.S. government agencies to act "as soon as possible and no later than 11:59 PM on Friday February 2, 2024." Agencies, including the Department of Homeland Security and the Department of Justice, must disconnect all Ivanti VPN appliances because hackers may exploit the vulnerabilities and compromise agency information systems. "The vulnerabilities in these products pose significant, unacceptable risks to the security of the...
