CISA urges immediate patch of Ivanti zero-day exploited since October 1

CISA has issued an emergency directive for Ivanti Connect Secure, citing active zero-day exploitation since at least October 1st. The flaw allows unauthenticated remote code execution, posing immediate risk to federal and enterprise networks. Patch availability and full scope of exploitation remain uncertain.