Ivanti Releases Patch for Active Zero-Day Vulnerability in Connect Secure

Theregister

Ivanti Releases Patch for Active Zero-Day Vulnerability in Connect Secure

First seen 14 Oct 2026, 20:37 UTC • •72.9

Article Content

1 / 3

Browse articles

ThreatCluster •October 14, 2026 at 21:33 UTC

•Ivanti's Connect Secure VPN is affected by a zero-day vulnerability.
•Researchers confirmed in-the-wild exploitation of this flaw.
•A patch has been released, and organizations are urged to apply it immediately.

Ivanti has released a patch for a zero-day vulnerability in its Connect Secure VPN product after researchers confirmed. The flaw, which affects multiple versions of Connect Secure, allows unauthorized access to sensitive systems. Ivanti is also addressing a separate privilege escalation issue, with a fix expected in the coming weeks. The company has not disclosed specific details about the attack vector or the number of affected users. Organizations using Connect Secure are urged to apply the patch immediately to mitigate risks. This incident highlights the ongoing threat posed by zero-day vulnerabilities in widely used software.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-14

Patch released for Connect Secure zero-day

Ivanti released a patch for a zero-day vulnerability in Connect Secure after confirming in-the-wild exploitation.

More articles in this cluster (2)

Threat Graph

7 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
Phishing
Zero-day Exploit
T1566 - Phishing

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Malware (1)

Shai-Hulud Worm

Affected Platform (1)

SharePoint

Relationships

Data Breach targets SharePoint
Phishing targets SharePoint
Zero-day Exploit targets SharePoint
T1566 - Phishing targets SharePoint
Shai-Hulud Worm related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track Shai-Hulud Worm in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What versions of Connect Secure are affected?

The vulnerability affects multiple versions of Ivanti's Connect Secure VPN, but specific version numbers are not disclosed.

How urgent is it to apply the patch?

It is critical to apply the patch immediately due to confirmed in-the-wild exploitation.

Are there any known attack vectors?

The articles do not specify the exact attack vector used for exploitation.

Continue Reading

Tensorlake npm Package Compromised by Shai-Hulud Worm On October 8, 2026, the Tensorlake npm package version 0.5.144 was compromised, delivering a credential-stealing worm known as Shai-Hulud. The malware, which was published through a compromised maintainer account, executes a preinstall hook that runs an obfuscated loader to harvest credentials from local files and CI…

Ransomware Threats Intensify with Personal Targeting Tactics A recent global survey revealed that 37% of ransomware attacks now involve psychological or physical threats, indicating a shift towards more personal and aggressive tactics by cybercriminals. This trend is raising alarms among security professionals as attackers leverage personal information to intimidate victims.…