
Advanced persistent threat (APT) actors have recently been discovered exploiting a critical flaw in Ivanti Endpoint Manager Mobile (EPMM) to target Norwegian entities, including a government network. This zero-day vulnerability, identified as CVE-2023-35078, has been actively exploited by the threat actors since at least April 2023. This article will delve into the severity of the exploitation, tactics employed by the