Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws

Experts warn that recently disclosed Ivanti Connect Secure VPN and Policy Secure vulnerabilities are massively exploited in the wild. Last week, software firm Ivanti reported that threat actors are exploiting two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Connect Secure (ICS) and Policy Secure to remotely execute arbitrary commands on targeted gateways. The flaw CVE-2023-46805 (CVSS score […]

breaking news connect cve cve-2023-46805 cve-2024-21887 experts exploitation exploited exploiting flaws hacking ics information security news it information security ivanti ivanti connect secure vpn pierluigi paganini policy secure vpn software threat threat actors vpn vulnerabilities week zero-day zero-day vulnerabilities