Mandiant's analysis has revealed the exploitation of Ivanti vulnerabilities: CVE-2023-46805 and CVE-2024-21887, allowing threat actors to execute arbitrary commands with elevated privileges. These flaws have been actively exploited as zero-days since December 2023, leading to compromised systems reported by Germany's Federal Office for Information Security (BSI).