U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

2026-11-01T02:51:38Z•bd046fcdf169572a79094a7fffc966fabc95ea8740e5456a401f9edd366ab95d
CVE-2026-118539CISA KEVCiscoDHSDrupal Commerce CoreGitLabIvanti Connect SecureNorth KoreaYoba malwareactive exploitationcloud exposurecritical infrastructurecrypto miningcryptocurrency theftdata breachincident responsepublicly exposed storagesupply chainvulnerability remediation

What happened

Security news feed covering active exploitation of Ivanti Connect Secure, Drupal Commerce Core, GitLab, and Cisco vulnerabilities; malware campaigns using fake AI applications to deploy crypto miners; major cryptocurrency theft investigations; sensitive data leaks; suspected cyberattacks against military infrastructure; and widespread publicly exposed cloud storage. Multiple entries indicate active exploitation and significant potential impact, particularly the CISA KEV additions, critical Drupal flaw, large-scale data exposure, and alleged Binance theft.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
bd046fcdf169572a79094a7fffc966fabc95ea8740e5456a401f9edd366ab95d
Enrichment time
2026-11-01T02:51:38Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.