Chained Vulnerabilities Exploited in Ivanti Cloud Service Appliances

CISA and the FBI warn that threat actors actively exploited chained vulnerabilities in Ivanti Cloud Service Appliances (notably CVE-2024-8963 combined with RCE and SQLi flaws) to gain access, execute remote code, steal credentials and deploy webshells; organizations are urged to upgrade, patch, retire end-of-life 4.6 instances, enable MFA and hunt for IOCs.