Borderline DeskUS border encounters fall as ICE removals pass 356,000 SpaceX DeskStarlink Starshield speed limit disrupts Ukraine's drones AmplifiedAnberlin — Never Take Friendship Personal AustraliaShoebridge’s lies charge fails the test of his own record AustraliaOne Nation still rejects Labor’s Digital Duty of Care bill AmplifiedEmery — The Question Hacking DeskIvanti Connect Secure zero-days chained, one still unpatched How-to DeskHow to install Windows' October patch and move off 24H2 AmplifiedDemon Hunter — Summer of Darkness Video DeskCyberpunk: Edgerunners 2 gets its official Netflix trailer Film DeskBoltgun 2 reviews: critics say the sequel beats the original AmplifiedNorma Jean — Bless the Martyr and Kiss the Child Computing DeskAMD's EPYC Verano brings 192 cores and LPDDR5X in 2027 Roads DeskHamilton woman, 80, killed in Princes Highway crash EV DeskFord opens invite list for its US$28,350 Fathom EV ute Tesla DeskTesla FSD v14 Lite reaches Intel-era Model S and Model X AustraliaAustralia's first Michelin stars go to 11 SA restaurants BreakingGFS Pride sinks in Strait of Hormuz after projectile strike Tesla DeskTesla's new Roadster, nine years late, finally shows Friday AustraliaParents charged after baby found dead at Glen Osmond motel

Borderline DeskUS border encounters fall as ICE removals pass 356,000 SpaceX DeskStarlink Starshield speed limit disrupts Ukraine's drones AmplifiedAnberlin — Never Take Friendship Personal AustraliaShoebridge’s lies charge fails the test of his own record AustraliaOne Nation still rejects Labor’s Digital Duty of Care bill AmplifiedEmery — The Question Hacking DeskIvanti Connect Secure zero-days chained, one still unpatched How-to DeskHow to install Windows' October patch and move off 24H2 AmplifiedDemon Hunter — Summer of Darkness Video DeskCyberpunk: Edgerunners 2 gets its official Netflix trailer Film DeskBoltgun 2 reviews: critics say the sequel beats the original AmplifiedNorma Jean — Bless the Martyr and Kiss the Child Computing DeskAMD's EPYC Verano brings 192 cores and LPDDR5X in 2027 Roads DeskHamilton woman, 80, killed in Princes Highway crash EV DeskFord opens invite list for its US$28,350 Fathom EV ute Tesla DeskTesla FSD v14 Lite reaches Intel-era Model S and Model X AustraliaAustralia's first Michelin stars go to 11 SA restaurants BreakingGFS Pride sinks in Strait of Hormuz after projectile strike Tesla DeskTesla's new Roadster, nine years late, finally shows Friday AustraliaParents charged after baby found dead at Glen Osmond motel

Thursday 15 October 2026

Ivanti Connect Secure zero-days chained, one still unpatched

CISA set a Friday deadline on CVE-2026-104935 after Volexity found a three-bug chain that gives unauthenticated root on Ivanti Connect Secure.

Glyph Thursday 15 October 2026, open calendar5 min read

Photo: Dave Ruske / Wikimedia Commons (CC BY 4.0), cropped

Listen

Free browser voice. Starts at once.

Uses text-to-speech.

Federal cyber defenders have a Friday deadline on a fresh Ivanti Connect Secure hole that attackers already used for root access. Two of the three bugs in the chain are patched. The privilege escalation that finishes the job is not.

Colourful Ethernet patch cables plugged into the ports of a network switch with green link lights — Photo: Dave Ruske / Wikimedia Commons (CC BY 4.0), cropped

Read next

More in Hacking →

Say hello in our guest book

Published

Glyph Thursday 15 October 2026 at 8:40 am Adelaide, open calendar5 min read

This desk has not corrected this file. Corrections.

The paper

Comments

No notes on this story yet.

Sign in to comment