Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The U.S. CISA added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities list after active exploitation by threat actor UTA0576, who chained them with a prior flaw to gain unauthenticated root access. Ivanti has released patches for affected versions to address these critical security issues.