Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

2026-10-15T02:51:34Z•e51af925016b1de5b7ca03740c120bff32615a0e03f1bc643f2adf0350888f38
CVE-2026-104935AI securityChinaClickFixIoT malwareIvanti ICSNorth KoreaRussiaSSRFSonicWall SMAactive exploitationauthentication bypassautonomous agentscloud securitycritical infrastructurecyber espionagehealthcare securityidentity securityphishingransomwareremote code executionzero-day

What happened

Dark Reading coverage highlights active exploitation of critical and high-severity vulnerabilities, including Ivanti ICS authentication bypass/RCE and SonicWall SMA SSRF, alongside phishing infrastructure, ransomware coercion, espionage campaigns, supply-chain and identity risks, malicious IoT implants, and emerging threats involving autonomous AI agents. Multiple reports indicate exploitation or real-world attack activity, but the feed aggregates many separate stories rather than describing a single incident.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
darkreading
Record identifier
e51af925016b1de5b7ca03740c120bff32615a0e03f1bc643f2adf0350888f38
Enrichment time
2026-10-15T02:51:34Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.