← All talks

Ivanti Exploit: Attackers Move FAST! See How #shorts

BSides Frankfurt0:4576 viewsPublished 2026-02Watch on YouTube ↗
About this talk
Ivanti advisory published May 13th, Watchtower Labs released a PoC 2 days later, and exploitation began just an hour after that. A stark reminder of rapid cyber threats. #CyberSecurity #Vulnerability #Exploitation #IncidentResponse #PatchManagement
Show transcript [en]

onto a short timeline to showcase how quickly the attackers move in some cases. Um we had the advisory published by Ivanti on the 13th of May. Um and mere two days later um Watchtower Labs who are usually pretty quick about discovering and uh replicating these vulnerabilities published a blog post with a um proof of compro proof of concept and a mere hour later uh we saw the first exploitation attempts locked on the customer appliance that we analyzed afterwards. And from there on it took only uh 3 weeks uh for the customer to realize whoops I think we forgot to pass that points. Uh so that's where we came