TechFo
TechFo Breaking: Ivanti Connect Secure Zero-Day Chain
2:39
CISA has added the final pieces of an actively exploited Ivanti Connect Secure attack chain to its Known Exploited Vulnerabilities catalog: CVE-2026-111357 and CVE-2026-118527, chained with the October authentication bypass CVE-2026-104935. The group Volexity tracks as UTA0576 has used the chain since early October to gain unauthenticated root access and steal Active Directory credentials.…