Mishcon de Reya page structure
Site header
Main menu
Main content section

Monthly Cyber Threats Reports - January 2025

Issue 1: January 2025

Monthly Cyber Intelligence Summary

Monthly Cyber Threats Reports - January 2025

Editor's Note

Mark Tibbs, Cyber Intelligence Director, Dispute Resolution

Our monthly report prepares cybersecurity practitioners to make better tactical, operational and strategic decisions. We have distilled analysis of key events from the previous month which have learning points that can be actioned to improve security.

Read the full note

News
glowing lights over abstract texture

New Ivanti VPN vulnerabilities exploited

On 8th January 2025, technology company Ivanti disclosed two critical vulnerabilities, CVE-2025-0282 and CVE-2025-0283 , affecting their Connect Secure VPN appliances. The more severe of the two, CVE-2025-0282, is a vulnerability that allows for unauthenticated remote code execution. This vulnerability has been actively exploited since mid-December 2024, leading to potential network compromises.

Subscribe

Never miss a publication by signing up to our mailing list

How can we help you?
Help

How can we help you?

Subscribe: I'd like to keep in touch

If your enquiry is urgent please call +44 20 3321 7000

Crisis Hotline

I'm a client

I'm looking for advice

Something else