Developing2 outlets · over 4 minutes
CISA Urges Ivanti Patch by Oct 16
CISA urges federal agencies to patch CVE-2026-104935 in Ivanti Connect Secure by October 16, 2026. The CVSS 8.6 flaw allows unauthenticated remote command execution. Volexity observed 105 exploit attempts from 50 IPs by October 14, 2026, with threat actor UTA0576 first spotted on October 3, 2026.
The story so far2 updates, latest first.
Tracked by ByteBrief