← Back to Feed
MAR-25993211-r1.v2 Ivanti Connect Secure (RESURGE)
CVE-2025-0282
March 28, 2025 · CISA Advisories · Severity: CRITICAL
CISA updated its Malware Analysis Report for RESURGE malware associated with Ivanti Connect Secure, providing deeper technical insight. The analysis shows that RESURGE can remain dormant until a remote actor connects, posing an ongoing threat. CISA encourages organizations to use the provided IOCs and detection signatures to identify and mitigate the malware.
Key Takeaways
- RESURGE malware can remain latent on Ivanti Connect Secure devices until remote connection.
- CISA updated the MAR with deeper technical insight for enhanced detection and response.
- Organizations should use IOCs and detection signatures to identify RESURGE samples.