State-Sponsored Hackers Exploit New Zero-Day Vulnerabilities in Ivanti VPN

State-backed hackers are exploiting two critical vulnerabilities in Ivanti's Connect Secure VPN software, allowing for unauthenticated remote code execution and potentially compromising corporate networks. While Ivanti is working on patches to be released by mid-February, security researchers have observed scanning activity targeting vulnerable appliances. Organizations are urged to prioritize mitigation guidance, but applying these measures will not resolve past compromises.