Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data. Ivanti confirmed attacks against a limited number of customers and released additional fixes on October 29, 2026, following its initial October patches. Volexity tracked UTA0576 activity to October 3 and, during […]
This article has been indexed from Cyber Security News
Read the original article:
Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access