Ivanti on Tuesday warned customers to immediately patch an actively exploited zero-day vulnerability in its Connect Secure (ICS) remote access gateway. The company did not disclose technical details of the flaw, but the advisory urges organizations to apply the fix without delay given that attacks are already underway.
Connect Secure is a widely used remote access appliance, making it a particularly attractive target for threat actors seeking entry into corporate networks. Ivanti's warning follows a pattern of similar zero-day disclosures in enterprise edge devices, where rapid patching is critical to limit exposure.
Organizations running Ivanti Connect Secure should treat this as a high-priority security update and verify that their instances are patched as soon as possible. Until the patch is applied, administrators may need to consider additional monitoring or mitigations, though Ivanti has not yet published workarounds.