News.Bloomberglaw Chinese Hackers Exploit Vulnerability in Ivanti VPN Software
Article Content
Browse articles 
In early 2024, the US government issued an emergency order for all civilian federal agencies to disconnect the Connect Secure VPN software made by Ivanti Inc. due to a breach by Chinese hackers. The hackers infiltrated nearly two dozen organizations, exploiting vulnerabilities in the widely used software, which is considered an industry standard across government and private sectors.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
Timeline
2024-01-10
US government issues emergency order to disconnect Connect Secure VPN
2024-01-10
Chinese hackers infiltrate nearly two dozen organizations
2026-02-19
Articles published detailing the VPN vulnerability and breach
More articles in this cluster (7)
Following this threat?
Track Army and CVE-2025-0282 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in the Wild On October 13, 2026, Ivanti disclosed a high-severity zero-day vulnerability tracked as CVE-2026-104935, affecting its Connect Secure (ICS) VPN appliances. This authentication bypass flaw allows unauthenticated attackers to execute arbitrary commands, with exploitation confirmed since at least October 1. The…