VulnHub

Real-time Cybersecurity News

Critical

Ivanti warns of Connect Secure zero-day exploited in attacks

BleepingComputer
Actively Exploited
Zero-dayVulnerabilityPatch

Overview

Ivanti has issued a warning regarding a zero-day vulnerability in its Connect Secure (ICS) remote access gateway that is currently being exploited by attackers. This flaw allows unauthorized access to sensitive systems, putting organizations at risk. Ivanti is urging customers to implement patches immediately to protect their systems from potential intrusions. The vulnerability affects users of the Ivanti Connect Secure product, which is widely used for secure remote access. Given the nature of the vulnerability and its active exploitation, it’s crucial for affected organizations to act swiftly to mitigate any potential damage and secure their networks.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: Ivanti Connect Secure (ICS) remote access gateway
  • Action Required: Customers are advised to immediately apply the latest patches provided by Ivanti for the Connect Secure product.
  • Timeline: Newly disclosed

Original Article Summary

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]

Impact

Ivanti Connect Secure (ICS) remote access gateway

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Customers are advised to immediately apply the latest patches provided by Ivanti for the Connect Secure product.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Zero-day, Vulnerability, Patch.

Read Original Article

Related Coverage

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

BleepingComputer

TFG London has reported a cybersecurity incident affecting its IT systems, particularly those used by its premium fashion brands, including Phase Eight, Hobbs, and Whistles. As a result of this attack, operations at these retailers have been disrupted. The exact nature of the incident hasn't been detailed, but the impact on the brands could lead to significant operational challenges, affecting their ability to serve customers effectively. This incident raises concerns about the security measures in place at fashion retailers and the potential risks they face from cyber threats. It's crucial for companies in this sector to assess their cybersecurity protocols to prevent future incidents.

Oct 13, 2026

Docker Hub flaw let attackers impersonate users, tamper with images

BleepingComputer

Docker has revealed a serious vulnerability in Docker Hub, identified as CVE-2026-105445. This flaw allowed attackers to impersonate other users by exploiting a personal access token (PAT), which could lead to unauthorized access to container repositories. As a result, attackers could potentially tamper with images stored in these repositories, posing significant risks to users who rely on Docker Hub for their container management. The incident underscores the need for all Docker Hub users to review their security practices, especially regarding the management of access tokens. Docker has urged users to take steps to secure their accounts and monitor their repositories for any unauthorized changes.

Oct 13, 2026

SAP warns of maximum severity OAuth2 SSRF security flaw

BleepingComputer

SAP has issued a warning regarding a severe vulnerability affecting its Cloud SDK for Python, part of a larger security update addressing 20 flaws across various products. This particular vulnerability is classified as maximum severity, indicating that it poses a significant risk to users and their systems. Companies using the affected SDK should act quickly to mitigate potential threats. The update comes as part of SAP's October 2026 security measures, highlighting the ongoing need for vigilance in software security. Users are encouraged to apply the necessary patches to protect their systems from potential exploitation.

Oct 13, 2026

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

The Hacker News

Researchers have identified three vulnerabilities in LG's webOS that can be exploited to give attackers root access to certain LG smart TVs without needing a PIN or any interaction from the owner. This means that anyone on the same local network could potentially take control of these TVs. The affected models include the 32LQ636BPSA and the 27TQ600SW, both running webOS version 7.5.7-25. LG has acknowledged the issue and released a fix to address these vulnerabilities, which was detailed in an advisory published on October 12. This incident raises concerns about the security of smart devices in general, as vulnerabilities like this could allow unauthorized access to personal data and control over the device itself.

Oct 13, 2026

Cyberattack Prompts Ahold Delhaize to Disconnect Systems

SecurityWeek

Ahold Delhaize, the parent company of several grocery brands, has taken some of its systems offline following a cyberattack that posed a security threat to its network. The company acted swiftly to contain the issue, though specific details about the nature of the attack or the systems affected have not been disclosed. This incident raises concerns about the security of retail networks, especially as cyberattacks become more common in the industry. Customers and employees may face disruptions as the company works to restore its systems and ensure the security of its operations. The situation serves as a reminder for businesses to remain vigilant in protecting their networks against potential cyber threats.

Oct 13, 2026

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

The Hacker News

On October 11, attackers gained remote access to refrigeration units in hundreds of French supermarkets, raising the temperature of fridges and freezers to as high as 50°C. This incident forced several retail chains, including Les Mousquetaires, to discard large quantities of food, leading to significant financial losses. The attackers exploited vulnerabilities in the Danfoss controllers that manage these cooling systems, which are typically accessed by maintenance companies remotely. This incident raises serious concerns about the security of IoT devices used in commercial settings, as it demonstrates how a cyber attack can directly impact food safety and waste. Retailers are now urged to reassess their security measures for critical infrastructure to prevent similar incidents in the future.

Oct 13, 2026