Ivanti patches two more Connect Secure zero-days exploited since October
Threat actors chained the flaws with an authentication bypass already fixed last month; CISA orders federal agencies to patch by Friday.
Ivanti has released security updates to patch two zero-day vulnerabilities in its Connect Secure (ICS) remote access gateways, which threat actors have chained in attacks since at least October 1.