Ivanti VPN zero-days, exploited Windows flaw, Docker Hub token mix-up | Cyber Security News Oct 14
Attackers chained Ivanti Connect Secure zero-days to take over VPNs without a login, one of them fully patched, and Microsoft's record October updates fix a Windows flaw that skips the warning on downloaded files. Also: Fortinet, Chrome, Copilot in Visual Studio, SAP, npm trusted publishing, Ghostscript, and a Docker Hub flaw that handed old tokens to new owners. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: Which remote-access path into your network would you least like to explain to an…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.