Palo Alto, Cisco, and Ivanti each disclosed an actively exploited zero-day within 48 hours, but the Ivanti case, three chained flaws with only two patched, is the one that shows single-CVE patching no longer closes the door.
Volexity's research on UTA0560/BlueMoon turns a Monday footnote into a live espionage campaign, and it shows exactly how much lead time a well-resourced actor gets from the gap between a fix landing in a code repository and that fix reaching a user's machine.
Three confirmed pre-disclosure exploitation incidents this week reveal that patch-cycle hygiene cannot defend against attackers who operate on perimeter appliances for months before any advisory exists.
Security