Chaining Three Ivanti Connect Secure Zero-Days to Root a Fully Patched VPN

Attackers chained three Ivanti Connect Secure zero-days to escalate from initial access to root on fully patched VPN appliances, with active exploitation observed before all fixes were available.