CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

CISA has issued an urgent warning to security administrators to immediately patch a critical vulnerability in Ivanti Connect Secure (ICS) that has been actively exploited as a zero-day since at least October 1st. The flaw poses significant risk to organizations using the affected product. CISA's advisory underscores the severity of the exploitation activity and the need for rapid remediation. The vulnerability allows threat actors to compromise systems running Ivanti Connect Secure without prior authentication or user interaction. Organizations are urged to apply available patches without delay to prevent potential breaches.