Ivanti patches two more Connect Secure zero-days chained in attacks

By Sergiu Gatlan · BleepingComputer · Monday, 2 November 2026 at 09:33 (2d ago) · Original article ↗

Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

BleepingComputer 4h ago

Security

North Korean fake job interview led to $6.3B Binance heist

'It was not a single isolated breach or a simple phishing incident,' exchange says

The Register 4h ago

Security

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist

The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance. A postmortem from the company says the process started in June with one developer downloading a tampered installer apparently…

The Verge 4h ago

Ivanti patches two more Connect Secure zero-days chained in attacks

More Security & Privacy

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

North Korean fake job interview led to $6.3B Binance heist

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist