Ivanti patches two more Connect Secure zero-days chained in attacks
I keep a mental scoreboard for Ivanti's edge devices, and the tally is getting hard to follow. Two more zero-days chained since October, patched only now. That's a long window for attackers to move through a gateway that sits directly on the network perimeter, which is exactly the kind of appliance you'd hope would be boring.
What connects here is the broader pattern of remote access products becoming the soft underbelly of enterprise security. Ivanti isn't alone, but the recurrence is notable. Each patch cycle feels like playing whack-a-mole, and I'd want to know whether the root cause is being addressed, or if we're just getting new band-aids.
I land on this: treat the update as mandatory, but don't stop there. Check logs, look for lateral movement, assume the gateway was touched. The fix closes the door, but the room might already be compromised.