Ivanti patches two more zero-days exploited in the Connect Secure attack chain

Ivanti released patches for two additional Connect Secure zero-day vulnerabilities that attackers chained with a previously disclosed authentication-bypass vulnerability. Ivanti said the attack chain had affected a limited number of customers and that the vulnerabilities were exploited in the wild.