{
  "id": 14495520,
  "title": "Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks",
  "url": "https://urgent.news/2026/10/14/ivanti-patches-connect-secure-zero-day-after-researchers-confirm-in",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-14T17:15:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/10/14/ivanti-patches-connect-secure-zero-day-after-researchers-confirm-in-the-wild-attacks/5303095"
  },
  "original_language": "en",
  "account": "Ivanti has released patches for a critical zero-day vulnerability in its Connect Secure software, following confirmation of in-the-wild attacks. The authentication bypass flaw, CVE-2026-104935, allows remote attackers to execute arbitrary commands without authorization. Ivanti acknowledges exploitation in limited cases, urging customers to update to affected versions 25.1.1.1 or earlier, 25.1.2.2 or earlier, and 22.8R2.4 or earlier. Volexity identified the attackers as UTA0576, suspecting criminal motives rather than espionage. Post-exploitation activity suggests credential theft, data exfiltration, log tampering, and network reconnaissance were primary goals. Though no malware was deployed, Volexity warns of a potential broader compromise. Ivanti's third year of zero-day exploits involving Connect Secure highlights ongoing challenges in securing the software.",
  "summary": "Vendor promises fix for separate privilege-escalation flaw in the coming weeks",
  "key_points": [
    "Ivanti releases patches for critical Connect Secure zero-day vulnerability",
    "Authentication bypass flaw allows remote attackers to execute arbitrary commands",
    "UTA0576 attackers suspected of credential theft, data exfiltration"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks",
        "url": "https://urgent.news/2026/10/14/ivanti-patches-connect-secure-zero-day-after-researchers-confirm-in-14500318",
        "published": "2026-10-14T17:15:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}