These two Ivanti bugs are allowing hackers to target cloud instances - so patch now

• New research points to flaws used in targets against cloud instances
• The flaws were previously found in on-prem attacks
• Ivanti released a patch so apply it now

Two bugs affecting Ivanti’s Endpoint Manager Mobile (EPMM), which were discovered and patched in mid-May, are still being abused in real-life attacks. In fact, they are now targeting cloud instances, as well.

This is according to cybersecurity researchers Wiz, who published a new report recently, detailing the new findings.

“Wiz Research has observed ongoing exploitation of these vulnerabilities in-the-wild targeting exposed and vulnerable EPMM instances in cloud environments since May 16th, 2025, coinciding with the publication of POCs by several sources including watchTowr and ProjectDiscovery,” the researchers said in their report.

60% off for Techradar readers

With Aura's parental control software, you can filter, block, and monitor websites and apps, set screen time limits. Parents will also receive ...