Security alert: Ivanti Connect Secure and Policy Secure zero-day vulnerabilities

CISA warns that threat actors are actively exploiting zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure Gateway appliances, potentially allowing unauthorized access, credential theft, and rootkit-level persistence that can evade detection. Organizations are urged to apply Ivanti patches, run integrity checks, restrict SSL VPN outbound access and privileges, hunt for IOCs, and assume affected devices may be compromised.