Threat Actor UTA0576 Chains 3 Flaws to Execute Commands as Root. Attackers are exploiting CVE-2026-104935 in Ivanti Connect Secure to bypass authentication and gain root access through a three-flaw exploit chain, targeting Active Directory credentials, BitLocker recovery keys and other secrets as researchers warn of wider enterprise compromise.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/ivanti-vpn-zero-day-exploited-in-active-attacks-a-33094
