🚨Ivanti Fixes Zero-Day in Connect Secure After Wild Attacks
Ivanti's Connect Secure hit by zero-day attacks
TL;DR
Ivanti has patched a zero-day vulnerability in Connect Secure after researchers confirmed attacks. The flaw, rated 8.6 on CVSS, allows remote attackers to execute arbitrary commands. Ivanti customers urged to update and check for compromise.
Ivanti has released a patch for a zero-day vulnerability in its Connect Secure product after researchers at Volexity confirmed in-the-wild attacks. The vulnerability, rated 8.6 on the CVSS scale, allows remote, unauthenticated attackers to execute arbitrary commands on affected systems. Ivanti customers are being urged to update Connect Secure and check for any signs of compromise. The affected releases include 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier. The attackers, now tracked as UTA0576, were interested in credential theft, data exfiltration, and network reconnaissance. Ivanti has previously had to deal with ICS zero-days in January 2025 and January 2024.
Key Points
Ivanti patched a zero-day in Connect Secure after Volexity confirmed attacks in the wild.
The vulnerability allows remote attackers to execute arbitrary commands on affected systems.
The affected releases are 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier.
The attackers, now tracked as UTA0576, were interested in credential theft and data exfiltration.
Ivanti plans to publish a fix for the additional bug in the coming weeks.
Why It Matters
If you're running Ivanti Connect Secure, this update is critical. The zero-day vulnerability allows attackers to execute arbitrary commands, potentially leading to data breaches and system compromises. Ivanti customers should update immediately to prevent further attacks. The attackers' use of hardcoded credentials and specific scripts highlights the importance of strong security practices.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.