Vulnerability revealed by Ivanti has been exploited by the same group that targetted Connect Secure from January 2024.