🟠High: CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent call for organizations to update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version. The advisory follows the disclosure of a vulnerability that is being actively exploited in the wild.
The flaw, tracked as CVE-2026-104935, carries a CVSS score of 8.6 and is an authentication bypass affecting ICS. Given the active exploitation, CISA is recommending immediate patching rather than waiting for a scheduled maintenance window.
Adding to the urgency, honeypots have logged 105 exploit attempts targeting the vulnerability, indicating that attackers are already scanning for and attempting to leverage exposed appliances.
Key points for defenders:
- Update Ivanti Connect Secure appliances and deployments to the latest version as soon as possible.
- Treat internet-facing ICS appliances as high-priority assets given the active exploitation and honeypot activity.
- Review your exposure and confirm patch status across all ICS instances.
Source: The Hacker News
Has your organization already patched its Ivanti Connect Secure appliances, or are you still working through the update?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login