UNC5221 and The Targeting of Ivanti Connect Secure VPNs
May 05, 2025•28 min
Listen to this episode in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more
Episode description
Matt Lin (Senior Incident Response Consultant, Mandiant) and Daniel Spicer (Chief Security Officer, Ivanti) dive into the research and response of UNC5221's campaigns against Ivanti. They cover how this threat actor has evolved from earlier campaigns, the continued focus of edge infrastructure by APT actors, and the shared responsibility of security in mitigating threats like this.
https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day
https://www.ivanti.com/blog/an-update-on-ivantis-ongoing-commitment-to-enhanced-product-security
https://www.ivanti.com/resources/secure-by-design/2024
https://cloud.google.com/blog/topics/threat-intelligence/2024-zero-day-trends?e=48754805
For the best experience, listen in Metacast app for iOS or Android
Open in Metacast