Security updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs. Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS. Successful exploitation… Read More "Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products"
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
Ivanti on Tuesday warned customers that a zero-day vulnerability in its Connect Secure (ICS) VPN appliances has been exploited in the wild. Tracked as CVE-2026-104935 and rated high severity, the issue is an authentication bypass that lets a remote, unauthenticated… Read More "Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN"