Ivanti is advising administrators to get up to date on their patches following a new spell of exploits against Endpoint Manager (EPM). The vendor said that threat actors are targeting CVE-2024-29824, a SQL injection attack that allows attackers to upload files and execute commands on vulnerable servers.

Source: SC Magazine