Ivanti Warns of Actively Exploited Zero-Day in Connect Secure

Ivanti released a security advisory on Tuesday warning customers of a zero-day vulnerability in its Ivanti Connect Secure (ICS) remote access gateway product that is currently being exploited in real-world attacks. The flaw allows threat actors to gain unauthorized access to systems, though specific technical details regarding the exploitation method and the exact CVE identifier were not included in the initial advisory. Ivanti has urged all customers to apply the recommended patch as soon as possible to mitigate the risk. The advisory highlights that the vulnerability affects Ivanti Connect Secure gateways deployed globally. While the company has not disclosed the specific victim count or the threat actor group behind the exploitation, the active exploitation status necessitates immediate action from affected organizations. Security researchers and industry analysts are monitoring the situation for further details regarding the vulnerability's technical mechanics and the scope of the campaign.