Ivanti patches two more Connect Secure zero-days used in attacks
Event Brief generated 42 s read
Written by an AI. It was merged from the 2 sources on this page and has not been reviewed by a person.
The short version
- Ivanti patched two more Connect Secure zero-days that attackers chained since at least October 1.
- Separately, over 1,000 internet-exposed GitLab servers are still unpatched against an actively exploited maximum-severity flaw.
- Both items are about edge and remote-access systems that are often internet-facing.
What happened
BleepingComputer reports that Ivanti released security updates for two more Connect Secure (ICS) remote access gateway flaws. The flaws have been chained in zero-day attacks since at least October 1. The same outlet reports that over 1,000 internet-exposed GitLab servers are still unpatched against a maximum-severity flaw that is actively exploited in remote code execution attacks.
Why it might matter
Gateways and code hosts sit at the edge of many networks, so unpatched systems can give attackers an entry point. Administrators with Connect Secure or GitLab exposure have a short window to apply fixes.
What we don’t know yet
The items do not give the CVE numbers, affected versions, or the number of compromised systems. It is not stated what the chained Ivanti flaws allow beyond initial access.
