CISA has detected ‘widespread and active exploitation of vulnerabilities’ in Ivanti Connect Secure VPN.