CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)
2026-11-02T20:51:40Z•f9e8657740d547ac86ecb906dc686511a937ff623cc6950b19eadebfe86f4519
CVE-2026-111357CVE-2026-118527AI agent securityAI-assisted cybercrimeAPI key securityAndroid TVCISA KEVIvanti Connect SecureNorth KoreaOT/ICSVOLTA-AUTODOXERXCPE botnetactively exploited vulnerabilitycryptocurrency theftdata breachfile uploadhardware walletinfostealerprivilege escalationrefrigeration systemsretailsupply-chain compromise
What happened
Help Net Security reporting covers actively exploited Ivanti Connect Secure vulnerabilities added to CISA’s Known Exploited Vulnerabilities catalog, a large Android TV botnet disruption, AI-assisted infostealer activity, cyberattacks against supermarket refrigeration systems, a suspected hardware-wallet supply-chain implant, breaches and cryptocurrency theft attributed to North Korea, and security considerations for AI coding agents and API-key wallets. The most urgent item is the exploited Ivanti vulnerability chain requiring remediation.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- f9e8657740d547ac86ecb906dc686511a937ff623cc6950b19eadebfe86f4519
- Enrichment time
- 2026-11-02T20:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.