Security2 hOctober 14, 2026, 17:15

Volexity uncovers Ivanti VPN attack using three zero-days

Volexity traced a breach of a fully patched Ivanti Connect Secure 22.8R2.4 appliance to threat actor UTA0576, which chained an authentication bypass, RCE and privilege escalation for unauthenticated root access. Ivanti patched two of the three flaws on October 13; CISA added CVE-2026-104935 (CVSS 8.6) to its KEV catalog.

Security Affairs

Open source

Volexity uncovers Ivanti VPN attack using three zero-days

Intrusion began by October 3 and was detected on October 5
Chain combined auth bypass, RCE and privilege escalation to root
CVE-2026-104935 (CVSS 8.6) added to CISA's KEV catalog
Attackers stole LAPS passwords, BitLocker keys and LDAP data

#Ivanti#Volexity#CISA

Citrix patches NetScaler SAML zero-day exploited in attacks

Security

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Security

JFrog Artifactory Under Active Attack: Three CVEs Chained

Security

Volexity uncovers Ivanti VPN attack using three zero-days

Citrix patches NetScaler SAML zero-day exploited in attacks

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

JFrog Artifactory Under Active Attack: Three CVEs Chained

Volexity spots China-aligned UTA0565 exploiting Chrome and Windows zero-days