Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

Home / Tech / Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

October 14, 2026 dirk 0 Comments 3 tags

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according to Volexity.

Volexity, which reported the flaws to Ivanti,

Source: The Hacker News

Explore More

Agentic AI: The Weapon That No Longer Needs a Warrior

Agentic AI: The Weapon That No Longer Needs a Warrior Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm.

OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members

OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members Source: Hacker News

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint,