Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti has issued an urgent warning to customers about an actively exploited zero-day vulnerability affecting Ivanti Connect Secure (ICS), a widely used remote access gateway product. The company is urging immediate patching to mitigate the risk. The vulnerability is being actively exploited in the wild, indicating a high-severity threat. Ivanti Connect Secure is commonly used by enterprises for remote access, making this a significant risk for corporate environments. This follows a pattern of Ivanti products being targeted by threat actors in previous years. Organizations using ICS are advised to apply patches as soon as possible and review their systems for signs of compromise. The zero-day nature of the flaw means it was exploited before a fix was publicly available, increasing the potential impact.