Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
Volexity reported on October 13 that an attacker it tracks as UTA0576 chained three zero-day flaws in Ivanti Connect Secure to run commands as root without logging in, hitting a fully patched appliance running version 22.8R2.4 starting October 3. Ivanti...