Ivanti releases patches for VPN zero-days, discloses two more high-severity vulns

Many versions still without fixes while sophisticated attackers bypass mitigations

Ivanti has finally released the first round of patches for vulnerability-stricken Connect Secure and Policy Secure gateways, but in doing so has also found two additional zero-days, one of which is under active exploitation.…

attackers bypass connect doing exploitation fixes found gateways high ivanti mitigations patches policy releases severity under vpn vulnerability vulns zero-days