CRITICALZero Day
Global

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

·Source: Dark Reading

Updated:

Executive Summary

CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.

Analysis

CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.

Indicators of Compromise (1)

CVE (1)
CVE-2026-104935
NVDMITRE CVE
Source Attribution

Originally published by Dark Reading on Oct 14, 2026.

Related Threats

CRITICALZero Day

Attackers Exploit Leaked Zero-Day Flaws in Widely Used PHP

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/attackers-exploit-leaked-zero-day-flaws-in-widely-used-php-image_small-9-a-33161.jpg" align=right hspace=4><b>Internet-Facing Systems Now Under Attack; PHP Team Promises Imminent Patch Release</b><br>Attackers are exploiting one or more zero-day vulnerabilities in PHP after details of the bugs leaked in advance of patches being re

Bank Info Security
LOWZero Day

Moving past autonomous exploitation to machine-speed security

Frontier AI advancements have created a world where exploitation outpaces defense. The average enterprise takes 32 to 43 days to patch , but the mean time to exploit a vulnerability is 10 hours . This asymmetry creates questions around how enterprises can trust autonomous AI to operate ubiquitously across their environments. As I mentioned on the TechCrunch Disrupt stage last week, security at mac

CSO Online
CRITICALZero Day

Possible new Cellebrite iPhone Radio Zero-Day

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the &#8220;advanced unlocking services&#8221; they&#8217;ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026. [&#8230;] According to Cellebrite, AU: is a &#8220;next-generation AFU v

Schneier on Security