CISA issues emergency directive for federal agencies to patch Ivanti VPN vulnerabilities

CISA issued an emergency directive after active zero-day exploitation of Ivanti Connect Secure and Ivanti Policy Secure VPN appliances was observed in the wild; attackers have deployed web shells and cryptominers across thousands of devices, prompting immediate mitigation and patching actions by federal agencies and vendors.