When Patch Tuesday becomes Patch Monday – Friday

This advisory reports multiple critical and high-severity vulnerabilities in Ivanti Connect Secure and Policy Secure appliances that can be chained to bypass authentication, achieve command injection/remote code execution, escalate privileges and allow full device takeover; active exploitation and public proof-of-concepts have been observed, and CISA directed U.S. federal agencies to disconnect affected devices with vendors recommending factory resets and patches.