{"uuid": "a19a50e5-cf64-4b14-ac24-04065749a73f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-22457", "type": "exploited", "source": "https://t.me/thehackernews/6613", "content": "\ud83d\udd25 New Ivanti ZERO-DAY exploited in the wild \u2014 China-linked UNC5221 hits Connect Secure (CVE-2025-22457, CVSS 9.0).\n\n\ud83d\udca3 Exploits spotted mid-March by Mandiant.\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0fMalware: TRAILBLAZE, BRUSHFIRE, SPAWN.\n\ud83c\udfaf Persistence. Credential theft. Data exfiltration.\n\n\u26a1 Patch now | See full story + urgent guidance: https://thehackernews.com/2025/04/critical-ivanti-flaw-actively-exploited.html", "creation_timestamp": "2025-04-04T08:11:07.000000Z"}