CISA adds Ivanti Connect Secure flaws to KEV catalog

What happened.CISA added two actively exploited vulnerabilities in Ivanti Connect Secure VPN appliances to its Known Exploited Vulnerabilities catalog following documented attacks against enterprise network perimeters.

Why it matters.Enterprise perimeter security relies upon trusted gateway appliances to enforce access policies. When threat actors achieve root execution on unauthenticated edge interfaces, internal networks face lateral compromise. Systems administrators must apply Ivanti patches immediately and inspect appliance logs for anomalous session creation. Security teams should audit connected domain controllers for credential harvesting attempts.