Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti released patches for two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. The vulnerabilities allow attackers to bypass authentication and execute code, prompting urgent updates for administrators. Ivanti urged immediate installation to prevent exploitation, as the flaws are actively being used in the wild.