"CISA Mandates Urgent Disconnect of Ivanti VPN Appliances Due to Zero-Day Exploits"

CISA has ordered U.S. federal agencies to disconnect all vulnerable Ivanti Connect Secure and Policy Secure VPN appliances by Saturday due to actively exploited security flaws. The directive follows extensive exploitation of zero-day vulnerabilities by threat actors. Ivanti has released security patches and mitigation instructions, urging customers to factory reset vulnerable appliances before patching. Federal agencies must disconnect the devices, hunt for signs of compromise, and take steps to bring them back online securely, reporting their progress to CISA.