AccountSubscribe

Ivanti patches two more Connect Secure zero-days chained in attacks

BleepingComputerNovember 2, 2026Vulnerabilities Network

MentionsIvanti Ivanti Connect Secure

Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]

Summary from BleepingComputer.

Read the full article at BleepingComputer

Full story3 outlets are covering this story. Read the summary and every outlet's coverage SecurityTabs reportupdated just nowIvanti Patches Two Exploited Connect Secure Flaws Used in Attack Chain

Explained

The technology and terms in this story. Learn more

Other sources covering the same vulnerabilities or event.

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

SecurityWeek3h agoVulnerabilitiesNetworkCVE-2026-111357 CVE-2026-118527

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The Hacker News2d agoVulnerabilitiesNetworkCVE-2026-111357

More in Vulnerabilities

SANS Stormcast Monday, November 2nd, 2026: OneNote Bulk Extraction; Trojanized Claude Code Extension in Cursor Marketplace; Ivanti Connect Secure Zero-Days (CVE-2026-111357); Android SMS of Death

Podcast6 minSANS Internet Storm Center StormCast8h agoVulnerabilitiesAIEndpointCVE-2026-111357

Alpine Linux rebuilds GitLab after attempted RCE attack

BleepingComputer19h agoVulnerabilitiesEndpointAppSec

Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs21h agoVulnerabilities

Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability

Help Net SecurityyesterdayVulnerabilities

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

The Hacker NewsyesterdayVulnerabilities