Ivanti Says Second Zero Day Used in Norway Govt Breach

ICYMI: Exploitation No Longer Requires Admin Authentication When Chained with Earlier Flaw
Threat actors who recently attacked a dozen Norwegian ministries by exploiting a zero-day vulnerability in Ivanti’s endpoint management software appeared to have another zero day flaw that tied to the overall attack exploit chain, Ivanti confirmed on Friday.
http://dlvr.it/Ssycl9