The Norwegian National Security Authority (NSM) revealed that threat actors exploited the CVE-2023-35078 zero-day vulnerability in Ivanti’s Endpoint Manager Mobile (EPMM) to target the Norwegian Government. According to the Norwegian authorities, the attack did not impact the Prime Minister’s Office, the Ministry of Defense, the Ministry of Justice, or the Ministry of Foreign Affairs.

Source: Heimdal Security Blog