CISA: Hackers still exploiting older Ivanti bugs to breach networks

CISA and the FBI warn that multiple Ivanti Cloud Service Appliance vulnerabilities—some previously patched—are being actively exploited in chained attacks to gain initial access, execute remote code, steal credentials, and install webshells; agencies urge immediate patching, hunting for IOCs, log/ artifact analysis, and assume stored credentials may be compromised.