Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

T2Covered by 1 source · first reported by Help Net Security at 14 Oct, 08:59 UTC

A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October 2026, Volexity discovered an…

security

Sources

• T2Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliancesHelp Net Security14 Oct, 08:59