Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Rapid7 reports multiple significant security developments, including an actively exploited Ivanti Connect Secure authentication-bypass zero-day enabling unauthenticated remote command execution, a critical GitLab CI/CD compiler flaw potentially enabling unauthenticated remote code execution, and a critical unauthenticated arbitrary-file-access vulnerability affecting multiple Atlassian Data Center products. The feed also covers Linux malware targeting telecom and network appliances, abuse of trusted customer communication channels, AI agent identity risks, and higher-education compliance and-­