CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials

CISA urged administrators to patch Ivanti Connect Secure appliances after attackers exploited CVE-2026-104935, a zero-day flaw that allows remote authentication bypass and command execution, enabling credential theft and data exfiltration. CISA issued its warning and added the flaw to its Known Exploited Vulnerabilities catalog on October 13, 2026. The warning covers Ivanti Connect Secure versions […]

This article has been indexed from Cyber Security News

Read the original article: