On 26 January 2026, Microsoft disclosed the actively exploited vulnerability CVE-2026-21509 in Microsoft Office, and within days weaponized DOC files appeared in public and via phishing campaigns targeting Ukrainian and EU government entities, using lures related to Ukraine and EU COREPER meetings; opening the documents triggers a WebDAV-based infection chain that downloads an LNK file, deploys a malicious DLL through COM hijacking and explorer.exe restart, executes shellcode hidden in an image,…

This NSE Script allows detection of EPMM servers using NMAP https://github.com/D4-project/Plum-Rules-NSE/blob/main/ivanti_epmm.nse

This script allows detection of EPMM device. https://github.com/D4-project/Plum-Rules-NSE/blob/main/ivanti_epmm.nse

The script is available there to check if an ASA is vulnerable. https://gist.cnw.circl.lu/alexandre.dulaunoy/95ca6ae6259e4c8b899b916ee8b3d4a6 ```bash #!/bin/bash # CIRCL - 2025 # Test CVE 2025-20362 # Ref : https://attackerkb.com/topics/Szq5u0xgUX/cve-2025-20362/rapid7-analysis if [ -z "$1" ]; then echo "Test for CVE-2025-20362" echo "Usage: $0 <IP>" exit 1 fi IP="$1" echo "Looking for CVE-2025-20362" response=$(OPENSSL_CONF=<( echo -e 'openssl_conf = openssl_init\n\n[…

# Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340) https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US https://forums.ivanti.com/s/article/Analysis-Guidance-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US Article Number : 000104594 ## Summary Ivanti has released updates for Endpoint Manager Mobile (EPMM) which addresses two critical severi…