CISA gives feds four days to patch Ivanti flaw exploited as zero-day

Multiple high-impact security incidents and zero-days reported: CISA issued an emergency four-day directive for U.S. federal agencies to patch a high-severity remote-code-execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM) being exploited as a zero-day. Separately, a new Linux local-privilege-escalation zero-day (“Dirty Frag”) grants root on most major distributions, and a critical PAN-OS firewall zero-day has been exploited by suspected state actors. The feed also highlights a 197k-customer Zara data breach, ShinyHunters’ mass Canvas portal defacements, several new malware/famil­