Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
2026-10-15T02:51:34Z•e51af925016b1de5b7ca03740c120bff32615a0e03f1bc643f2adf0350888f38
CVE-2026-104935AI securityChinaClickFixIoT malwareIvanti ICSNorth KoreaRussiaSSRFSonicWall SMAactive exploitationauthentication bypassautonomous agentscloud securitycritical infrastructurecyber espionagehealthcare securityidentity securityphishingransomwareremote code executionzero-day
What happened
Dark Reading coverage highlights active exploitation of critical and high-severity vulnerabilities, including Ivanti ICS authentication bypass/RCE and SonicWall SMA SSRF, alongside phishing infrastructure, ransomware coercion, espionage campaigns, supply-chain and identity risks, malicious IoT implants, and emerging threats involving autonomous AI agents. Multiple reports indicate exploitation or real-world attack activity, but the feed aggregates many separate stories rather than describing a single incident.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- e51af925016b1de5b7ca03740c120bff32615a0e03f1bc643f2adf0350888f38
- Enrichment time
- 2026-10-15T02:51:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.