Hackers exploit Ivanti Connect Secure zero-days to gain root access and steal credentials
ZERO-DAYIvanti Connect Secureredteam/daily · 1 source
- Severity
- Critical
- Sources
- 1
What happened
Attackers found and used previously unknown flaws in a VPN device made by Ivanti, which is used to give staff secure remote access to a company's network. The flaws let them run commands with full control of the device, steal login details and look around internal networks, even on an appliance that had been fully patched.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether your organisation runs Ivanti Connect Secure VPN appliances.
- Review Ivanti Connect Secure appliances for signs of compromise and reset any credentials they may have exposed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Products