--- title: "Security digest: January 8, 2025" url: https://erroneo.us/security/2025-01-08/ description: "January 8, 2025 vulnerability digest: 1 brief (Ivanti Connect Secure Zero-Day RCE (CVE-2025-0282)); 1 CISA KEV addition (Ivanti); 1 critical advisory…" type: security-digest-day section: "Security Digest" date_published: 2025-01-08 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: January 8, 2025 1 editorial brief, 1 known exploited (cisa kev) addition and 1 critical advisory. ## Take stock - Check exposure: Ivanti Connect Secure Zero-Day RCE (CVE-2025-0282) . Organizations that ran internet-facing Ivanti Connect Secure on 22.7R2.4 or earlier in December 2024 or January 2025, and anyone who never factory-reset after patching. - Do you run any of these? Ivanti Connect Secure, Policy Secure, and ZTA Gateways. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-01-15. - Maven: 1 critical advisory ( org.apache.openmeetings:openmeetings-parent ). Check with mvn dependency:tree -Dincludes=: . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Check exposure** [Ivanti Connect Secure Zero-Day RCE (CVE-2025-0282)](https://erroneo.us/security/briefs/ivanti-connect-secure-cve-2025-0282/index.md): A real zero-day used for espionage and patched in January 2025; if you ran Connect Secure below 22.7R2.5 last winter, a clean patch level today does not prove you were never backdoored. ## Known exploited (CISA KEV) - [CVE-2025-0282](https://erroneo.us/security/cve/CVE-2025-0282/index.md) Ivanti Connect Secure, Policy Secure, and ZTA Gateways: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (CISA due 2025-01-15) ## Critical advisories - [CVE-2024-54676](https://erroneo.us/security/cve/CVE-2024-54676/index.md) Apache OpenMeetings vulnerable to Deserialization of Untrusted Data — Maven org.apache.openmeetings:openmeetings-parent >= 2.1.0, < 8.0.0 → 8.0.0 --- Source page: https://erroneo.us/security/2025-01-08/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt