CISA has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming they are being actively abused in the wild. Researchers found that chaining these flaws with a third bug lets an unauthenticated attacker gain full root access on affected VPN gateways. Organizations still running vulnerable ICS appliances should patch immediately given how severe the exposure is.
// source: thehackernews.com ↗