Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access
Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data. Ivanti confirmed attacks against a limited number of customers and released additional fixes on October 29, 2026,...