Tech IT News Today: Ivanti Zero-Days Hit (Nov 4, 2026)

Top story

The biggest IT security story this week is the chaining of two new zero-day flaws in Ivanti Connect Secure, patched on November 2-3, 2026. Attackers combined the two bugs to gain root access on affected systems, according to reports from BleepingComputer and Rapid7. This matters because Connect Secure is widely used VPN and remote-access software for businesses, and a root-level compromise can give attackers full control of a corporate network. Ivanti's track record makes this especially worrying: CISA has flagged 38 Ivanti vulnerabilities as actively exploited since November 2021, and 12 of those were also used in ransomware attacks. Earlier Connect Secure zero-days were exploited in both 2024 and 2025, so this is now a recurring pattern rather than a one-off incident. Ivanti has over 40,000 customers and more than 7,000 partners worldwide, meaning the patch rollout affects a huge base of organizations that now need to check whether they're exposed and apply fixes immediately.

Security and cloud

Separately, a ransomware strain called C3RB3R has been hitting Synology network-attached storage (NAS) devices, reported on November 3, 2026. The twist here isn't a new zero-day — it's that attackers are exploiting a security gap that Synology already patched roughly a year ago but that many home and small-office users never installed. Synology has released five DSM (DiskStation Manager) builds that close the hole, but the attack only works because so many NAS boxes are still running outdated software. This is a reminder that storage appliances, which often sit quietly in a closet without regular maintenance, are an easy target when patches are skipped. If you run a Synology NAS, checking for and applying the latest DSM update is the single most useful thing you can do right now.

Cloudflare also announced on November 3, 2026 a new resource called Zero Wire, designed to help security teams investigate critical internet vulnerabilities faster. The idea addresses a familiar pain point: when a new critical bug drops, teams scramble to compare vendor advisories, read technical write-ups, and figure out whether their own systems are affected. Zero Wire aims to centralize that triage process. For IT and security teams juggling dozens of moving-target vulnerabilities (like the Ivanti and Synology issues above), a single hub that tracks disclosures and impact could meaningfully cut response time during the first critical hours of an incident.

Industry and policy

On the infrastructure side, data center networking continues to scale up to support growing compute demand. Broadcom's Tomahawk 6 switch family, which moved from early samples to full production shipping earlier this year, is being cited as a key piece of the networking backbone inside modern data centers. Industry forecasts tracking data center growth through 2033 point to continued expansion of this kind of high-capacity switching gear as facilities try to keep pace with rising data and compute traffic. For IT buyers and data center operators, this underlines that the networking layer — not just processors — is a major bottleneck and investment area as facilities scale.

Why it matters

Taken together, this week's stories paint a familiar but important picture: attackers are increasingly chaining known weaknesses — whether in VPN appliances like Ivanti Connect Secure or in consumer/SMB storage boxes like Synology NAS — rather than relying solely on brand-new zero-days. Patch management, not just detection, remains the frontline defense. At the same time, tools like Cloudflare's Zero Wire show the industry is also investing in faster response infrastructure, recognizing that the time between disclosure and exploitation keeps shrinking. For any organization running VPN gateways, NAS devices, or other internet-facing appliances, the practical takeaway is the same: check your patch levels today, not next quarter.