UTA0576 Active Directory Password Spraying

Three-Flaw Ivanti Connect Secure Chain Exploited; Two Flaws Patched, One Privilege Escalation Unfixed

Memory-only post-exploitation can hide compromises so CISA has ordered federal agencies to remediate by October 16, 2026.