CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
Read original article ↗AI Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned organizations to immediately patch a critical authentication bypass vulnerability in Ivanti Connect Secure (ICS) appliances, tracked as CVE-2026-104935, which has been exploited as a zero-day since at least October 1, 2026. The vulnerability allows unauthenticated remote attackers to execute arbitrary commands, enabling credential theft and data exfiltration. Cybersecurity firm Volexity observed a threat actor, tracked as UTA0576, chaining this flaw with other vulnerabilities to achieve unauthenticated root-level code execution and target Active Directory credentials, including LAPS passwords and BitLocker recovery keys.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.