
Ivanti Connect Secure zero-day exploited since early October, attacker evades detection tool
A VPN gateway zero-day, CVE-2026-104935, has been under active exploitation since October 1 — the attacker chains it with two other flaws and evades Ivanti's own Integrity Checker Tool.










