CVE-2025-0282 is an Ivanti zero-day exploited by Chinese threat actors (UNC5337) to deploy SPAWN malware ecosystem. Apply patches immediately and run Ivanti's ICT integrity checker. If the appliance shows indicators of compromise, perform a factory reset before redeployment - the malware persists through standard updates.
Ivanti Connect Secure Stack-Based Buffer Overflow allows unauthenticated remote code execution exploited in the wild.
Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.
Start Supernova — $99/mo →