Ivanti Connect Secure Zero-Day (CVE-2025-22457) Exploited by China-Nexus UNC5221
A critical stack-based buffer overflow in Ivanti Connect Secure VPN was exploited as a zero-day by UNC5221 (China-nexus) to deploy TRAILBLAZE dropper and BRUSHFIRE passive backdoor on edge devices globally.