UNC5221 and The Targeting of Ivanti Connect Secure VPNs

Matt Lin (Senior Incident Response Consultant, Mandiant) and Daniel Spicer (Chief Security Officer, Ivanti) dive into the research and response of UNC5221's campaigns against Ivanti. They cover how this threat actor has evolved from earlier campaigns, the continued focus of edge infrastructure by APT actors, and the shared responsibility of security in mitigating threats like this.

You can listen to UNC5221 and The Targeting of Ivanti Connect Secure VPNs online on Radio and Podcast. Open the player on this page to stream the available audio.

UNC5221 and The Targeting of Ivanti Connect Secure VPNs is an episode from Eye on Security by Mandiant.

This episode is 27:55 long.

This episode was published on May 5, 2025.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Eye on Security when more episodes are available from the podcast feed.