Ivanti

Volexity disclosed that an attacker chained three zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to gain unauthenticated root command execution, with Ivanti having patched only two of the three flaws so far.

VPN backdoor in an Ivanti subsidiary exploited by Chinese hackers led to 119 additional organizations being compromised.