Today, attackers are targeting Ivanti Connect Secure, a security product used by businesses to manage and secure their IT infrastructure. Small businesses should be especially vigilant as this product contains critical vulnerabilities that could lead to unauthorized access and data theft.
Ivanti Connect Secure (CVE-2026-118527)
Ivanti Connect Secure contains a vulnerability that allows attackers to upload files with their own content to a specific location on the system. This could be used to hide malicious files, making them appear legitimate. Businesses should update to the latest version of Ivanti Connect Secure to protect against this threat.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Ivanti Connect Secure (CVE-2026-111357)
Ivanti Connect Secure has a vulnerability that lets attackers escalate their privileges without proper authentication. This could lead to unauthorized access to sensitive systems. Businesses should ensure they have strong authentication mechanisms in place and consider updating to the latest version of Ivanti Connect Secure to mitigate this risk.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Remove software you do not use
Every program is something else to keep updated. Uninstall what you no longer need, especially old browser extensions.
Doing it once, properly
Saving now often means paying twice: cut-price IT work is frequently rebuilt from the start, and the outage or breach before the rebuild is the expensive part.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-118527 on the National Vulnerability Database
- CVE-2026-111357 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.