[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-cisa-warns-of-actively-exploited-ivanti-vpn-flaw":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},11545,"cisa-warns-of-actively-exploited-ivanti-vpn-flaw","CISA Warns of Actively Exploited Ivanti VPN Flaw","A new authentication bypass in Ivanti Connect Secure lets attackers run commands without logging in, and CISA says it's already being used in the wild.","Ivanti's VPN gateway has another zero-day, and this one's already being exploited.\n\nCISA confirmed on October 13 that attackers are actively exploiting CVE-2026-104935, an authentication bypass in Ivanti Connect Secure. The flaw hits versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier, letting an unauthenticated attacker run arbitrary commands on the appliance to steal credentials and exfiltrate data. CISA added the bug to its Known Exploited Vulnerabilities catalog the same day and is telling organizations to patch immediately. Worse, Ivanti's own Integrity Checker Tool may miss signs of the attack, since the malicious commands run in memory instead of writing to disk.\n\nIvanti Connect Secure has been a recurring target for serious intrusions over the past couple of years, and once again the fix is not just a version bump. CISA's recovery guidance calls for a factory reset, reissued certificates, reset API keys, and new passwords across every account - domain, admin, and local. That is the real cost of a bug like this: forensics and rebuilds, not a quiet patch Tuesday.\n\nCISA points to a Volexity writeup already detailing the exploitation chain, which is usually a sign defenders are playing catch-up.","[\"security\",\"ivanti\",\"zero-day\",\"vpn\"]","2026-10-13T12:00:00.000Z","2026-10-13T22:47:13.935Z","2026-10-13T22:47:18.771Z","published",null,[],"security",[24,26,27,28],"ivanti","zero-day","vpn",[30],{"name":31,"url":32},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Falerts\u002F2026\u002F10\u002F13\u002Fcisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure",0,{"sections":35},[36,41,45,50,55,60,65,70,75,80,85,90,95,100],{"name":37,"slug":38,"count":39,"latest_published_at":40},"AI","ai",6990,"2026-10-13T20:09:54.000Z",{"name":42,"slug":24,"count":43,"latest_published_at":44},"Security",976,"2026-10-13T21:34:17.000Z",{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",505,"2026-10-13T22:48:12.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",501,"2026-10-13T22:00:00.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",251,"2026-10-13T23:47:04.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",212,"2026-10-13T22:20:12.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",201,"2026-10-13T23:13:31.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Startups","startups",132,"2026-10-13T21:15:00.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Software","software",123,"2026-10-13T21:33:43.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Dev Tools","dev-tools",116,"2026-10-13T16:20:18.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"General","general",77,"2026-10-13T22:42:18.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Gaming","gaming",65,"2026-10-13T19:00:48.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",36,"2026-10-13T18:00:00.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]