<![CDATA[🟠 High: CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts]]>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent call for organizations to update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version. The advisory follows the disclosure of a vulnerability that is being actively exploited in the wild.

The flaw, tracked as CVE-2026-104935, carries a CVSS score of 8.6 and is an authentication bypass affecting ICS. Given the active exploitation, CISA is recommending immediate patching rather than waiting for a scheduled maintenance window.

Adding to the urgency, honeypots have logged 105 exploit attempts targeting the vulnerability, indicating that attackers are already scanning for and attempting to leverage exposed appliances.

Key points for defenders:

  • Update Ivanti Connect Secure appliances and deployments to the latest version as soon as possible.
  • Treat internet-facing ICS appliances as high-priority assets given the active exploitation and honeypot activity.
  • Review your exposure and confirm patch status across all ICS instances.

Source: The Hacker News

Has your organization already patched its Ivanti Connect Secure appliances, or are you still working through the update?

]]>https://xploitlk.com/topic/730/high-cisa-urges-immediate-ivanti-connect-secure-updates-as-honeypots-log-105-exploit-attemptsRSS for NodeTue, 27 Oct 2026 07:48:30 GMTSun, 18 Oct 2026 12:30:17 GMT60