Ivanti Secure VPN Zero-Day Vulnerabilities Allow Chinese Threat Actor to Compromise Systems
Two zero-day vulnerabilities have been discovered in Ivanti Secure VPN, enabling unauthorized remote code execution and system compromise.
The vulnerabilities are being actively exploited by a Chinese nation-state threat actor called UTA0178.