Security
Ivanti Connect Secure: three chained zero-days are exploited. Patching isn't enough — assume compromise
Attackers chained an authentication bypass with two newer Ivanti Connect Secure flaws to get root on VPN appliances, and CISA's first federal deadline has already passed. Here's which builds fix it and what to check if your box was exposed.