Security researchers revealed that attackers have chained three zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to achieve unauthenticated root command execution. Ivanti has released patches for two of the flaws, while a fix for the third is still pending. Administrators are urged to apply available mitigations immediately to prevent complete network compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →