> TritonInfoSec News
Home / Nov 01, 2026 / Story
0
#3 The Hacker News general October 31, 2026 at 08:27 UTC

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

By [email protected] (The Hacker News)

AI Summary

CISA added two Ivanti Connect Secure vulnerabilities to its KEV catalog following active exploitation: CVE-2026-111357 (CVSS 8.8), a missing authentication flaw, and a second flaw that together enable unauthenticated root access via chained exploitation. Defenders running ICS should treat patching as immediately mandatory given CISA's KEV designation and confirmed in-the-wild chaining. This continues the pattern of Ivanti VPN appliances serving as primary initial-access targets for sophisticated threat actors.

Read full article → https://thehackernews.com/2026/10/attackers-chain-…

Relevance score: 89.0/100

# More from November 01

  1. 1
    $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor SecurityWeek
  2. 2
    Hackers steal $6.3 billion from Binance in record crypto heist Ars Technica Security
  3. 4
    China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days CyberScoop
  4. 5
    Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor The Hacker News
  5. 6
    Max-Severity GitLab Vulnerability Exploited Against Alpine Linux SecurityWeek
  6. 7
    WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours The Hacker News
  7. 8
    Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis The Hacker News
  8. 9
    PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress SecurityWeek
  9. 10
    Chainalysis discloses data breach from "offensive agentic techniques" BleepingComputer