Ivanti Connect Secure zero-days exploited in mass campaign before patches
·VulnerabilityCritical
Two zero-day vulnerabilities in Ivanti Connect Secure VPN were chained for unauthenticated remote code execution, with nation-state actors and criminal groups exploiting thousands of devices globally before a patch was available.
Deception angle
VPN appliance exploitation is now the most common initial access vector in enterprise breaches. A decoy VPN login page or a fake network segment behind a decoy firewall catches lateral movement immediately after the initial foothold.
Read about Kandaro Deception, or browse more security news.