Cybernews<p>A suspected Chinese APT group is exploiting a critical flaw in Ivanti's Connect Secure VPN, which the company failed to patch and document properly.</p><p><a href="https://infosec.exchange/tags/China" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>China</span></a> <a href="https://infosec.exchange/tags/VPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>VPN</span></a> <a href="https://infosec.exchange/tags/technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>technology</span></a> <a href="https://infosec.exchange/tags/patch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>patch</span></a> <a href="https://infosec.exchange/tags/cyberthreat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberthreat</span></a> </p><p><a href="https://cnews.link/chinese-threat-actor-critical-vulnerability-ivanti-1/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">cnews.link/chinese-threat-acto</span><span class="invisible">r-critical-vulnerability-ivanti-1/</span></a></p>