IVANTI SENTRY EXPLOITED IN THE WILD, PATCHES EMITTED

Summary from the TLDR Cybersecurity newsletter

Ivanti has disclosed the exploitation of a critical MobileIron/Ivanti Sentry gateway authentication bypass bug, CVE-2023-38035. The vulnerability allows the takeover of sensitive network components. It requires access to admin port 8443 and impacts unpatched Sentry v9.18 and earlier.