Ivanti Connect Secure Archives • Daily CyberSecurity

Ivanti Connect Secure Vulnerability Exploited in the Wild via Zero-Day Chain

Ivanti Connect Secure vulnerability diagram showing Ivanti Connect Secure zero-day chain for CVE-2026-104935, CVE-2026-111357, and CVE-2026-118527

Ivanti Connect Secure Vulnerability Exploited in the Wild via Zero-Day Chain

Do Son October 30, 2026

Patch the Ivanti Connect Secure vulnerability now. This Ivanti Connect Secure zero-day chain with CVE-2026-104935 is actively exploited in the wild.

Ivanti Connect Secure Zero-Day Chain CVE-2026-104935 Exploited by UTA0576 to Gain Root Access

Ivanti Connect Secure zero-day exploit chain CVE-2026-104935 used by UTA0576 to gain root access on a VPN appliance

Ivanti Connect Secure Zero-Day Chain CVE-2026-104935 Exploited by UTA0576 to Gain Root Access

Do Son October 13, 2026

UTA0576 chained an Ivanti Connect Secure zero-day, CVE-2026-104935, with a root exploit to steal AD credentials. Patch now and check memory.

Ivanti Connect Secure Vulnerability CVE-2026-104935 Exploited in the Wild

Do Son October 13, 2026

Ivanti Connect Secure vulnerability CVE-2026-104935 is exploited in the wild, letting unauthenticated attackers run commands. Update to 25.1.1.2 now.

From MDifyLoader to Fscan: JPCERT Uncovers Deep Exploitation of Ivanti VPN Flaws in Advanced Malware Campaign Ivanti Exploitation, Multi-Malware Campaign

Ivanti Exploitation, Multi-Malware Campaign

From MDifyLoader to Fscan: JPCERT Uncovers Deep Exploitation of Ivanti VPN Flaws in Advanced Malware Campaign

Do Son July 22, 2025

JPCERT/CC details a sophisticated, ongoing malware campaign exploiting Ivanti Connect Secure (CVE-2025-0282, -22457) using MDifyLoader, Cobalt Strike, vshell, and Fscan for stealthy persistent access.

CISA Warns of RESURGE Malware: Exploiting Ivanti Vulnerability NTLM Vulnerabilities, CVE-2024-43451 CVE-2024-37361 - RESURGE Malware

CISA Warns of RESURGE Malware: Exploiting Ivanti Vulnerability

Do Son March 29, 2025

Discover the implications of RESURGE malware as described by CISA, including its methods of escalating permissions and web shell usage.

CVE-2025-0282 (CVSS 9.0): Ivanti Confirms Active Exploitation of Critical Flaw Ivanti EPMM security updates Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283

Ivanti EPMM security updates Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283

CVE-2025-0282 (CVSS 9.0): Ivanti Confirms Active Exploitation of Critical Flaw

Do Son January 8, 2025

Stay informed about the security advisory addressing CVE-2025-0282 and CVE-2025-0283 vulnerabilities in Ivanti's Connect Secure, Policy Secure, and Neurons for ZTA Gateways.

Akamai Unveils New VPN Post-Exploitation Techniques: Major Vulnerabilities Discovered in Ivanti and FortiGate VPNs Cuckoo Spear campaign - APT 10

Akamai Unveils New VPN Post-Exploitation Techniques: Major Vulnerabilities Discovered in Ivanti and FortiGate VPNs

Do Son August 12, 2024

The analysis focuses on vulnerabilities found in two popular VPN products: Ivanti Connect Secure and FortiGate VPNs.

Critical Vulnerabilities Discovered in Ivanti Connect Secure and Policy Secure CVE-2023-46805 CVE-2024-21887

Critical Vulnerabilities Discovered in Ivanti Connect Secure and Policy Secure

Do Son April 3, 2024

Ivanti has released an urgent security advisory detailing multiple critical vulnerabilities affecting their popular ICS and Policy Secure gateways