Ivanti’s Exploited VPN Chain Demands Another Upgrade
Monday, November 2, 2026 · 6 min
Ivanti has patched two more exploited Connect Secure flaws, requiring another upgrade even for organizations that installed the initial fixes. BLG confirms client-file access in a Microsoft cloud intrusion, while package-malware research highlights risks to developer machines and build systems.
Listen
Show notes
Ivanti has patched two more exploited Connect Secure flaws, requiring another upgrade even for organizations that installed the initial fixes. BLG confirms client-file access in a Microsoft cloud intrusion, while package-malware research highlights risks to developer machines and build systems.
In this episode
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain - SecurityWeek — SecurityWeek
“Ivanti has released patches for two more Connect Secure (ICS) zero-days that attackers chained with a vulnerability the company disclosed last month. The newly patched bugs are CVE-2026-111357 and CVE-2026-118527. Ivanti added them on Thursday to its October 13 advisory…”
- BLG Statement Regarding Cybersecurity Incident | BLG — BLG
“We recently identified limited unauthorised access to a portion of our Microsoft cloud environment in what we now know is a wider campaign of activity targeting Canadian law firms. Our investigation has confirmed that certain files, including files related to clients, were…”
- 106 malicious npm and PyPI packages as of 28 Oct 2026: what they did | Safeguard Blog — Safeguard
“A handful were plainly built to hurt people: an install-time Monero miner that persists through systemd, a dependency-confusion beacon pointed at internal package scopes, an npm package that tries to publish new packages under whatever npm identity installs it, and three PyPI…”