‼️ Three zero-days. Root commands. No login.

An attacker exploited the flaws in a fully patched Ivanti Connect Secure VPN and stole stored credentials.

Ivanti confirms exploitation in the wild. Two flaws patched; a fix for the third is pending.

Read: https://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.html