Ivanti Cloud Services Appliance Zero-Day Attack

Suspected nation-state actors exploited and chained multiple zero-day vulnerabilities in Ivanti Cloud Services Appliance (CSA) leading to administrator takeover, credential theft, arbitrary SQL execution, remote code execution and webshell implants; CISA/FBI and ANSSI advisories and FortiGuard reporting confirm active exploitation and recommend applying vendor patches.