Vulnerability revealed by Ivanti has been exploited by the same group that targeted Connect Secure from January 2024.