BreakingCyber Security
Active Attacks Hit Ivanti Connect Secure Through Unpatched Zero-Day
Attackers are already exploiting CVE-2026-104935, a flaw that lets them skip login entirely and run arbitrary commands on Ivanti Connect Secure appliances. The bug hits versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier, and is being used for credential theft and data exfiltration. CISA added it to its Known Exploited Vulnerabilities list on October 13, 2026 and is pushing organizations to update without delay.