> TritonInfoSec News
Home / Oct 15, 2026 / Story
0
#2 BleepingComputer general October 14, 2026 at 12:58 UTC

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

By Sergiu Gatlan

AI Summary

CISA is urging immediate patching of CVE-2026-104935 (CVSS 8.6), an authentication bypass flaw in Ivanti Connect Secure that has been actively exploited as a zero-day since at least October 1st. Honeypots have already logged 105 exploit attempts, and this marks the sixth exploited Ivanti vulnerability of 2026. Ivanti had partially discovered the flaw during internal checks in June but did not issue an out-of-band patch, allowing attackers to weaponize it.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 94.0/100

# More from October 15

  1. 1
    Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days BleepingComputer
  2. 3
    Global takedown hits network behind 1 billion phishing messages BleepingComputer
  3. 4
    FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested BleepingComputer
  4. 5
    Cisco patches new Secure Email Gateway zero-day exploited in attacks BleepingComputer
  5. 6
    Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days The Hacker News
  6. 7
    AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host The Hacker News
  7. 8
    U.K. Sanctions Cryptomus for RU Money Laundering Krebs on Security
  8. 9
    OpenAI engineer arrested for allegedly planting spy device in office BleepingComputer
  9. 10
    Ghostscript flaw lets hackers hijack servers via PDF uploads BleepingComputer