TLDR Tech / News
Exploit Chain Targets Ivanti Connect Secure VPNs
Researchers at Volexity have identified an active exploit chain affecting Ivanti Connect Secure VPN appliances. This chain combines vulnerabilities for authentication bypass, file writing, and privilege escalation, enabling unauthenticated remote code execution at the root level. The threat actor UTA0576 has leveraged this exploit for reconnaissance and credential theft. Ivanti has issued patches for the authentication bypass and RCE flaws and is developing a fix for the privilege escalation vulnerability.
Read the full story