Ivanti zero-day exploits explode as bevy of attackers get in on the act

Researchers report rapid, in-the-wild mass exploitation of Ivanti Connect Secure VPN zero-days beginning after public disclosure, with Volexity and Microsoft reporting at least ~1,700 compromised devices (predominantly attributed to UTA0178) across governments, large enterprises, and critical sectors; attackers deployed a modified GIFTEDVISITOR webshell, and organizations are urged to run Ivanti's Integrity Checker, collect forensic artifacts, and hunt for lateral movement and credential compromise.