Ivanti Connect Secure zero-days gave attackers root on VPN gateways
Attackers chained three Ivanti Connect Secure flaws to get root on VPN appliances without logging in, starting on 3 October. The 13 October update doesn’t fix two of them. Update to 25.1.1.3 or 22.8R2.6, then check…