Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root Access

Attackers are chaining zero-day flaws in Ivanti Connect Secure VPN appliances to gain unauthenticated root access, exposing stored credentials and sensitive Active Directory data, Cybersecurity News reports. Ivanti confirmed attacks against a limited number of customers and released additional fixes on October 29, following its initial October patches, with Volexity tracking the UTA0576 activity to October 3.