Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms

A Chinese hacking group weaponized several zero-day vulnerabilities in Ivanti Cloud Services Appliance (CSA) devices. The campaign, detected at the beginning of the year, targeted governmental, telecommunications, media, finance, and transport sectors.