Actively Exploited Zero-Days in Ivanti VPN are Letting Hackers Backdoor Networks

The vulnerabilities, tracked as CVE-2023-846805 and CVE-2024-21887, were used in an attack last month to steal configuration data, modify files, and gain unauthorized access to systems.