This week ·
A Volexity customer
How they got in, as reported. A known flaw in software the victim ran.
← All items this week- Date
- 14 Oct 2026
- Place
- United States
- Who
- A Volexity customer
- The way in
- Known software flaw
- Source
- Security Affairs
01 · What was reported
What was reported.
Threat actor UTA0576 compromised a fully patched Ivanti Connect Secure VPN appliance belonging to a customer monitored by cybersecurity firm Volexity. The attacker chained three zero-day vulnerabilities to gain unauthenticated root...
The way in, as the source states it: a known flaw in software the victim ran.
02 · What we check for it
What we check for it.
Software versions your site advertises and known flaws in them.
03 · Source
Source.
Source: Security Affairs ↗This page repeats what the source reported, with its date. It says nothing about any firm that is not named in it.