China-Connected Houken Hackers Exploit Ivanti Zero-Day Vulnerabilities to Breach French Systems
On July 1, 2025, the French cybersecurity agency ANSSI published a report detailing a sophisticated attack campaign executed by a highly skilled cybercrime group known as Houken. This group has exploited multiple zero-day vulnerabilities—specifically CVE-2024-8190, CVE-2024-8963, and CVE-2024-9380—in Ivanti Cloud Service Appliance (CSA) devices, effectively compromising high-value targets across France.…