Hello and welcome to the Tuesday, September 23rd, 2025 edition of the Sands Inlet Storm Center's Stormcast.

My name is Johannes Ulrich, recording today from Las Vegas, Nevada.

And this episode is brought you by the sands.edu graduate certificate program in

cybersecurity leadership. SISA, the cybersecurity and infrastructure security agency has

published a report with details regarding two organizations that were recently compromised

via a vulnerability in Ivanti's endpoint manager, Mobile, or Ivanti EPMMM.

The vulnerabilities were exploited in order to install a backdoor on these systems.

That was essentially persistent mechanism being used by these attackers. And the end

effect was that the attacker was able to execute optory commands on affected systems. There's, of course,

always a chance that they hit additional systems that didn't report samples to SESA, that's very likely.

Also, SESA did publish a number of indicators of compromise, like URLs, for example,

hidden order to take advantage of the vulnerability,

and also additional analysis of the back door that was found on these systems. The vulnerabilities that were

exploited here were patched in Mays or something you should have probably taken care of by now,

but if you haven't, well, this is probably your very last chance. And if you find unpatched

systems, absolutely make sure they have not already been compromised. And LastPass is reporting

that they have seen a large number of fake GitHub repostories that are distributing malware.

Now, the reason last pass out of came across them is that this particular wave of fake GitHub

repositories is also impersonating last pass in addition to a number of other software

vendors in the list I noticed one password for example, also Da Vinci Resolve was being impersonated. Many of these GitHub repositories claim that they have premium or paid versions of that product for free to download.

And they're in particular targeting MacBooks.

Now what the user actually ends up with when they're installing this particular

...