Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Summary
Ivanti has released a patch for a zero-day vulnerability in its Connect Secure product, which had been confirmed to be exploited in the wild. The company also stated that a fix for a separate privilege-escalation flaw will be available in the coming weeks.
IFF Assessment
The discovery and exploitation of a zero-day vulnerability in a widely used security product represents a significant risk to organizations, making it bad news for defenders.
Defender Context
This incident highlights the ongoing threat of zero-day exploits targeting critical infrastructure and enterprise security products. Defenders should prioritize patching Ivanti Connect Secure immediately and remain vigilant for indicators of compromise related to this vulnerability. The announcement of a separate privilege-escalation flaw also suggests a need for proactive security reviews of Ivanti products.