Ivanti Sentry Issues Warning About Critical Zero-Day Vulnerability

Ivanti Sentry warns of a critical zero-day vulnerability (CVE-2023-38035) that allows unauthenticated actors to bypass authentication controls and gain unauthorized access to sensitive APIs, potentially reconfiguring settings, executing system commands, and writing files onto the system.

CISA Releases RMM Cyber Defense Plan to Enhance Cybersecurity Measures and Reduce Supply Chain Risks for Small to Medium-Sized Critical Infrastructure Enterprises

The US Cybersecurity and Infrastructure Security Agency (CISA) has released the RMM Cyber Defense Plan, a comprehensive strategy developed in collaboration with industry and government partners, aimed at enhancing cybersecurity measures and reducing supply chain risks for small to medium-sized critical infrastructure enterprises.