Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti released security updates to address two additional zero-day vulnerabilities in its Connect Secure (ICS) remote access gateway product. These flaws have been actively chained together in attacks since at least October 1. The vulnerabilities are being exploited in the wild, making them critical threats requiring immediate patching. This follows a pattern of Ivanti products being targeted by threat actors through zero-day exploitation. The chaining of vulnerabilities suggests sophisticated threat actor involvement. Organizations using Ivanti Connect Secure are urged to apply the patches immediately. The incident highlights ongoing risks in remote access and VPN gateway products.