WORLDTECHCybersecurity DEVELOPING
Ivanti tells customers to patch Connect Secure zero-day already exploited in attacks
First reported Source: BleepingComputerLast editorial activity
Ivanti has urged customers to apply a patch immediately to a zero-day flaw in its Connect Secure remote access gateway, which is already being exploited in attacks. The warning was reported by BleepingComputer.
Flaw is exploited before a fix exists
According to the report, the vulnerability is being used in real attacks, which means it was abused before a fix was available. Ivanti's advice to customers was to patch without delay.
The reporting names the affected product as Ivanti Connect Secure, known as ICS, a remote access gateway. The facts available here come from a single outlet, so details beyond the warning itself have not been independently confirmed.
Open questions
- Which versions of Connect Secure are affected?
- How many customers have been targeted so far?
Sources & evidence
- BleepingComputer Reporting source
Ivanti warns of Connect Secure zero-day exploited in attacks ↗
https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/