Skip to content
Threat Feed
Subscribe

Product

Connect Secure

3 briefs RSS
critical threat

Remote Code Execution Vulnerability in Ivanti Connect Secure

An unauthenticated remote code execution vulnerability (CVE-2026-104935) in Ivanti Connect Secure is being actively exploited in the wild, enabling attackers to gain control over affected systems.

exploited Connect Secure +3 vulnerability rce network-appliance
1t 1c
high threat

China-Linked Espionage Campaign Targeting Global Infrastructure via Integrity Technology Group

Integrity Technology Group, a Chinese for-profit entity, is conducting multi-year cyber espionage targeting government, healthcare, and religious institutions using automated vulnerability scanning, credential harvesting, and specialized data exfiltration tools.

Bash +12 Integrity Technology Group espionage china cyber-espionage microsoft-365 dcsync
3t 6c 2i
high advisory

Detection of Exploitation Attempts Targeting Ivanti Connect Secure Bookmark Endpoint Vulnerabilities

Detection of access to the Ivanti Connect Secure bookmark endpoint associated with CVE-2023-46805 and CVE-2024-21887 via a GET request resulting in a 403 Forbidden response indicates a potential exploitation attempt.

Connect Secure ivanti cve-2023-46805 cve-2024-21887 vpn exploitation command-injection authentication-bypass
2r 1t 3c updated