Ivanti patches two more Connect Secure zero-days chained in attacks
At a glance
- Severity
- Medium
- Used in attacks
- No flaws named
- Vendors and products
- Ivanti
- Industries
- Manufacturing
- Reported by
- 1 outlet
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-11-02 09:33 UTC
Related stories
- Barracuda Networks security advisory (AV26-1112)
Canadian Centre for Cyber Security · 2026-11-02
- BTCPay Server warns of hot wallet crypto thefts on outdated instances
BleepingComputer · 2026-11-02
- Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
SANS Internet Storm Center · 2026-11-02
- Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Infosecurity Magazine · 2026-11-02
- Apple warns users in 99 countries of mercenary spyware
The Record · 2026-11-02