Hackers have exploited a chain of Ivanti Connect Secure (ICS) zero-day vulnerabilities to obtain unauthenticated root access and steal credentials. Volexity tracks the previously unknown attacker as UTA0576 and observed exploitation beginning October 3, 2026, against an appliance running version 22.8R2.4, which was fully patched at the time.... Weiterlesen: Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gai…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials
Hackers have exploited a chain of Ivanti Connect Secure (ICS) zero-day vulnerabilities to obtain unauthenticated root access and steal credentials. Volexity…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
16 sources
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
15 more sources
VVulDB Updates4 hours agoCVE-2026-106208 | Google Chrome up to 154.0.8037.97 improper authorization (WID-SEC-2026-3761) VVulDB Updates4 hours agoCVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updates4 hours agoCVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updates4 hours agoCVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updates4 hours agoCVE-2026-106212 | Google Chrome up to 154.0.8037.97 Autofill improper authorization (WID-SEC-2026-3761) VVulDB Updates4 hours agoCVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761)
+9
13 sources
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
12 more sources
VVulDB Updates2 hours agoCVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue VVulDB Updates2 hours agoCVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write VVulDB Updates2 hours agoCVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou VVulDB Updates2 hours agoCVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference LLinux, GNU/Linux, free soft…5 hours agoThe Linux 7.4 Merge Window Is Easily The Largest In Kernel History IIT Security News4 hours agoCritical Linux Kernel Vulnerability Could Allow Hackers to Gain Remote Root Access
+6
11 sources
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
10 more sources
VVulDB Updates1 hour agoCVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780) VVulDB Updates1 hour agoCVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268) VVulDB Updates1 hour agoCVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management VVulDB Updates3 hours agoCVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management VVulDB Updates3 hours agoCVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872) VVulDB Updates3 hours agoCVE-2026-69399 | Microsoft Azure Arc privileges management
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4309005/vulnerabilities-cve/hackers-exploit-ivanti-connect-secure-zero-day-vulnerabilities-to-gain-root-access-and-steal-credentials/