All news
Ivanti Connect Secure: three exploited flaws give root without login – patch, then check AD
CISA added two more Ivanti Connect Secure flaws to its catalog of exploited vulnerabilities on October 30. Chained with an authentication bypass listed on October 13, they give an attacker root on the VPN appliance without credentials. Volexity, which found the attacks in the first week of October, says the attackers deleted evidence from the appliance's logs and went after Active Directory secrets.