ZeroDay Findings
Sign inSign up

Every 24 hours

Tech News

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Oct 14, 2026

    Urgent Action Required: CISA Alerts on Ivanti Connect Secure Zero-Day Vulnerability

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning to system administrators regarding a zero-day vulnerability in Ivanti Connect Secure (ICS), which has been actively exploited since at least October 1st. This vulnerability poses significant risks to organizations utilizing the platform, which is commonly deployed for secure remote access and VPN services. CISA's advisory emphasizes the urgency for security teams to implement patches immediately to mitigate potential threats that could arise from this flaw.

    What changed

    The vulnerability in question affects a wide range of enterprises that rely on Ivanti's services, potentially exposing sensitive data and systems to malicious actors. Given the increasing trend of cyberattacks targeting remote access solutions, the exploitation of this flaw could lead to unauthorized access, data breaches, and further compromise of organizational networks. As CISA highlights the ongoing exploitation, it is crucial for affected organizations to act swiftly to safeguard their infrastructures.

    Who is affected

    In light of this situation, CISA's recommendation serves as a reminder of the importance of timely patch management and the proactive identification of vulnerabilities within IT environments. Organizations are urged to prioritize this patching process to prevent attackers from leveraging the flaw for nefarious purposes. The rapid response to such vulnerabilities can significantly reduce the window of opportunity for cybercriminals.

    What it means

    As the landscape of cyber threats continues to evolve, the incident underscores the necessity for robust incident response strategies and regular security assessments. Organizations are encouraged to review their security protocols and ensure that they are prepared to respond to similar incidents in the future. This proactive stance not only protects against current threats but also fortifies defenses against potential future vulnerabilities.

  2. Oct 14, 2026

    Critical Authentication Bypass Flaw in Ivanti Connect Secure Exploited by Hackers

    A significant security vulnerability in Ivanti Connect Secure has been exploited by hackers, allowing unauthorized access to systems without requiring legitimate user accounts. This authentication bypass flaw, tracked as CVE-2026-104935, was initially identified by Ivanti as part of their product security program and was patched in the July release 25.1.3.0. However, exploitation occurred before the vendor could backport the fix to all supported versions. The flaw enables attackers to spoof user identity signals, bypassing standard authentication checks entirely, which poses a severe risk for organizations utilizing affected versions of the software.

    What changed

    The vulnerability has a CVSS score of 8.6 out of 10, indicating a high level of severity. It impacts various product branches, including multiple releases of Ivanti Connect Secure, specifically versions 22.8R2.4 and earlier, along with certain 25.1 releases. Notably, versions 22.7 and earlier are not impacted. In response to the threat, Ivanti has released patches for several versions, including 22.8R2.5 and various 25.1 releases, urging security teams to assess their deployed versions and apply the necessary fixes.

    Who is affected

    Organizations are advised to investigate potential compromises as they implement the fixes, although reliable indicators of compromise are still being developed. The urgency of this situation is underscored by the fact that attackers were able to execute arbitrary commands on the appliances once they gained access. Security teams are now on high alert, and the incident highlights the critical need for companies to maintain up-to-date security measures and monitor their systems for unusual activities.

    What it means

    The exploitation of this vulnerability serves as a stark reminder of the importance of swift patch management and the potential consequences of security oversights. As cybersecurity threats continue to evolve, organizations must remain vigilant and proactive in safeguarding their networks against similar vulnerabilities.