CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials

CISA urged administrators to patch Ivanti Connect Secure appliances after attackers exploited CVE-2026-104935, a zero-day flaw that allows remote authentication bypass and command execution, enabling credential theft and data exfiltration. CISA issued its warning and added the flaw to its Known Exploited Vulnerabilities catalog on October 13, 2026.

Reported so far by one publisher.

Summary from Cyber Security News.

Reporting1

CSN Cyber Security News CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials · Abinaya 6:57 AM

Related

BC Ivanti patches two flaws after attacker chains three zero-days October 13

CS Prolific Chinese espionage group exploits BeyondTrust zero-day October 15

BC Arista patches new VeloCloud Orchestrator zero-day exploited in attacks October 22

CS Citrix discloses a third exploited NetScaler zero-day within a week October 4

Topics Zero-day vulnerabilities