Ivanti & Palo Alto Zero-Days, GhostAction & Laptop Farms

Ivanti, Palo Alto Networks, and Cisco all disclosed actively exploited flaws in network security products this week, including an Ivanti Connect Secure chain that gave attackers root access on a fully patched appliance. GhostAction hijacked about 1,900 GitHub accounts and targeted more than 30,000 repositories for secrets, and the Justice Department charged 14 people in a laptop-farm scheme that put North Korean IT workers inside more than 70 US companies.