Threat actors began exploiting a critical vulnerability in Ivanti's Sentry security gateway within 24 hours of its public disclosure, according to cybersecurity researchers.