NewsBleepingComputer
Ivanti patches two more Connect Secure zero-days chained in attacks
Teaser from the source
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on zero-days
Other advisories
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
- CriticalCVE-2026-3909Chrome zero-days CVE-2026-3909 (Skia) and CVE-2026-3910 (V8)
- CriticalCVE-2024-50623Cleo file transfer zero-days exploited by Clop for data theft
- CriticalCVE-2024-49039Microsoft November 2024: 2 actively exploited zero-days
- CriticalCVE-2024-43573Microsoft October 2024: 2 actively exploited zero-days
- CriticalCVE-2024-8963Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor
- CriticalCVE-2024-38217Microsoft September 2024: 3 actively exploited zero-days
- CriticalCVE-2024-38107Microsoft August 2024: 6 actively exploited zero-days
Other news entries
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)NewsRapid7
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainNewsSecurityWeek
- This is Fine: What NetScaler Zero-Days Tell Us About the New NormalNewsSecurityWeek
- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreNewsThe Hacker News
- Zero-Days Lurk in Microsoft's Overgrown October Patch TuesdayNewsDark Reading
- Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-daysNewsBleepingComputer
- Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So FarNewsThe Hacker News
- Hackers get $1,262,000 for 98 zero-days at Pwn2Own IrelandNewsBleepingComputer
ID