Ivanti security news · Threat Recapvendors/ivanti.htmlSecurity news, advisories and CVEs for IvantiMon, 19 Oct 2026 12:28:44 GMT CISA warns admins to immediately fix Ivanti flaw exploited as zero-dayhttps://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/128ewuwWed, 14 Oct 2026 12:58:07 GMTBleepingComputer. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]VulnerabilityZero-day CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks recordshttps://therecord.media/new-ivanti-microsoft-bugs-exploitationbc2lzoWed, 14 Oct 2026 12:35:00 GMTThe Record. The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.Vulnerability Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilitieshttps://securityaffairs.com/200895/hacking/volexity-uncovers-stealthy-ivanti-vpn-attack-using-three-zero-day-vulnerabilities.html1spuc0zWed, 14 Oct 2026 10:15:30 GMTSecurity Affairs. Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Volexity started investigating suspicious activity at one of its monitoring customers and traced everything back…VulnerabilityZero-day Attackers chained three Ivanti zero-days to gain root on fully patched VPN applianceshttps://www.helpnetsecurity.com/2026/10/14/ivanti-zero-days-gain-root-patched-vpn-appliances/jeiaunWed, 14 Oct 2026 08:59:19 GMTHelp Net Security. A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of…VulnerabilityZero-day Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentialshttps://cybersecuritynews.com/ivanti-connect-secure/cbhbpdWed, 14 Oct 2026 07:51:39 GMTCybersecurity News. Attackers chained three zero-day flaws in Ivanti Connect Secure VPN appliances to gain root-level access without logging in, then searched for credentials and sensitive Active Directory data. The activity, which began on October 3, 2026, targeted a fully…VulnerabilityZero-day Ivanti Connect Secure Zero-Day Exploited in Attackshttps://news.google.com/rss/articles/CBMilgFBVV95cUxPTUh2THFuUjVPR0xnQ1ltRldvQnVRTWJSLVYxTlNzTmpRekFBODRSaVRMYjRocHNsVXE5dkVwaEtBNDdRQ29uWTdQcDEyZXJGZVNGR3JudlhaUkxmZ3hJZmF2RmhNQnM1Q0RibTFmU0hRQno3OXBBdVZHZHY1a1Q5bi0xMFN0SHAzX3lPa19HZG1vLTJuUmc?oc=5r1rsijWed, 14 Oct 2026 07:49:56 GMTDecipher (+1 more sources). Ivanti Connect Secure Zero-Day Exploited in Attacks decipher.scZero-dayVulnerability Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Productshttps://www.securityweek.com/citrix-fortinet-ivanti-patch-29-vulnerabilities-across-their-products/1ui5s7sWed, 14 Oct 2026 07:26:35 GMTSecurityWeek. Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.Vulnerability Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-dayhttps://cyberscoop.com/ivanti-connect-secure-zero-day-actively-exploited/1djcbivTue, 13 Oct 2026 22:10:42 GMTCyberScoop. The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release.VulnerabilityZero-day Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Farhttps://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.html11c06yzTue, 13 Oct 2026 17:33:11 GMTThe Hacker News. An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions…VulnerabilityZero-day Ivanti Connect Secure 0-Day Vulnerability Actively Exploited in the Wildhttps://news.google.com/rss/articles/CBMibkFVX3lxTE1xbVN0R0hLODhLTjlqT01uVG1vOXlyTlhFZFFVaENHS0IxdFhtUVhobmZKVHJaZ2tjTE9sOG8tUVU4R3ktaWFmcF9tQXhvd2t4OElodklVc21yUFRlMXFmOVIxR2U0dndieGhNVHpR0gFzQVVfeXFMUG5VTDQ1WllKbUM2VGdwZS1zZ0pvSFBpWVVpQnN3azdKMkZmMWRvTlF6ckpfYnEtd0h4dFFBYzQ3Sm5ydDBhUmFob05remw4OXZINEFCaldqUEZvVDduMC02ZWhrd012b1BaQWlLM0FINWNFVQ?oc=51modwonTue, 13 Oct 2026 16:06:57 GMTCybersecurity News. Ivanti Connect Secure 0-Day Vulnerability Actively Exploited in the Wild CyberSecurityNewsVulnerabilityZero-day Ivanti warns of Connect Secure zero-day exploited in attackshttps://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/12hvz0uTue, 13 Oct 2026 15:45:50 GMTBleepingComputer (+10 more sources). Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]AdvisoryVulnerabilityZero-dayResearch A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Dayshttps://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/adh76sTue, 13 Oct 2026 15:32:12 GMTVolexity (+1 more sources). Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory providing upgrade instructions to […]ResearchVulnerabilityZero-day