Hacker Targets Ivanti Connect Secure in Chained Exploitation

Hacker targets Ivanti Connect Secure in chained exploitation

Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack. 

Hacker targets Ivanti Connect Secure in chained exploitation | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

A suspected criminal hacker is targeting Ivanti Connect Secure customers through a complex exploit chain that combines three high-severity vulnerabilities, according to a report Tuesday by Volexity, a Virginia-based cybersecurity firm.  The chain combines an authentication-bypass vulnerability with remote code execution and privilege-escalation flaws to achieve root-level code execution (RCE), according to researchers. The authentication […] Tha…

Hackers Chain 3 Ivanti VPN Zero-Days to Gain Root Access Without Authentication

Attackers chained three zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances to execute commands as root without authentication, then… Read more →

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October 2026, Volexity discovered an unknown threat actor, UTA0576, abusing a zero-day exploit chain to compromise a fully patched (at the time, version 22.8R2.4) Ivanti Connect Secure (ICS) …

Attackers chain three Ivanti VPN zero-days for root access

One of the flaws awaits fix.