Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
2026-10-13T19:23:59Z•52425c4d9fb7b157501bd29d0b2eb19bd09fa2c6b0d199f6a0f8a42b40d83c2a
CVE-2026-104935AI securityAdobe vulnerabilitiesAhold DelhaizeChrome securityGitHub breachICSIoT malwareIvanti Connect SecureOT securityVPNXWorm RATcryptocurrency theftdata breachhardware implantransomwareretail disruptionroot accesssupply-chain compromisesurveillance malwareunauthenticated remote code executionzero-day
What happened
SecurityWeek RSS collection covering a critical Ivanti Connect Secure zero-day enabling unauthenticated remote code execution with elevated privileges, a broad Adobe security update, enterprise and retail cyber incidents, malware capability expansion, supply-chain and hardware compromise, and emerging AI-enabled and IoT threats. The Ivanti vulnerability and the Ledger hardware implant are the most immediately severe items.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 52425c4d9fb7b157501bd29d0b2eb19bd09fa2c6b0d199f6a0f8a42b40d83c2a
- Enrichment time
- 2026-10-13T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.