InfoSec News Nuggets 05/08/2026
Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks Ivanti released May security updates for Endpoint Manager Mobile that fix five vulnerabilities, including CVE-2026-6973, a high-severity flaw exploited in targeted attacks. The bug requires admin privileges, but reporting indicates it may be tied to earlier EPMM flaws that allowed attackers to gain broader control of mobile device management infrastructure. Organizations running on-prem EPMM should patch quickly, review admin accounts, rotate credentials where appropriate, and look for…