Ivanti
Ivanti is a global enterprise IT and security software company that provides the trusted data authority for AI-driven, autonomous endpoint management. Ivanti connects IT and security operations data in a unified system of record –– giving teams clear visibility of every device in their environment, and the ability to intelligently manage risk. With automated remediation and self-healing capabilities, IT and security teams can agree on governance, proactively and autonomously resolve issues and operate at scale. At the heart of Ivanti’s offerings is the AI-powered Ivanti Neurons platform, where authoritative data drives decisions across endpoints, services and exposure––so AI acts on what is known, within pre-defined guardrails. Ivanti fosters an inclusive environment where diverse perspectives are honored and valued, reflecting a commitment to a sustainable future for customers, partners, employees and the planet.www.ivanti.com
108
MENTIONS
34
EPISODES
30
PODCASTS
Search complete. 108 mentions across 34 episodes found for "Ivanti".
Oct 19, 2026
speaker_0NARRATOR
The larger lesson is that internet-facing infrastructure needs continuous verification, not patching alone.
speaker_0NARRATOR
Investigate Ivanti Connect secure appliances for compromise and rotate credentials that may have passed through affected devices.
speaker_0NARRATOR
For the sources and the full Daily Cyber newsletter, visit dailycyber.news.
Rory MonaghanHOST
So it seems like a bow has been tied on the end of this issue.
Rory MonaghanHOST
In another report from bleepcomputer.com, Ivanti urged customers last Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure remote access gateway.
Rory MonaghanHOST
Formerly known as Pulse Connect Secure and originally Juniper Pulse, the enterprise-grade ICS SSL VPN provides remote employees, contractors, and hybrid workforces with secure access to corporate and cloud resources.
Rory MonaghanHOST
This one's tracked to CVE-2026-14935, and it's a high severity authentication bypass zero-day that affects ICS versions 22.8 R2.4 and earlier, 25.1.2.2 and earlier, and 25.1.1.1 and earlier.
Costin RaiuHOST
But if you expect everyone to fight this battle alone by themselves, either through patching or something else, I don't think we'll have any kind of good news anytime soon.
Ryan NaraineHOST
Speaking of not having good news anytime soon, we have fresh, fresh Ivanti news this week.
Ryan NaraineHOST
We got word from Volexity, our friends at Volexity, on a new zero-day chain that reaches root without a web shell.
Ryan NaraineHOST
Ivanti connects secure vulnerability.
Ryan NaraineHOST
In the wild, pre-auth RCE exploitation of...
Ryan NaraineHOST
Ivanti connects secure VPN devices, chain exploitation of multiple ODs leading to full C2 without dropping any malware.
Ryan NaraineHOST
None of this is new in terms of these Fortinet Ivanti devices, but we did get some IOCs from Volexity.
Ryan NaraineHOST
I don't want to linger too much on the details of like the individual case because it's just the same thing
Carl FranklinHOST
All right.
Carl FranklinHOST
The next story, Ivanti warns of Connect Secure zero-day exploited in attacks.
Carl FranklinHOST
Avanti.
Duane LaFlotteHOST
Avanti.
Dave BittnerHOST
The attackers demonstrated sophisticated knowledge of BeyondTrust's internal systems, deploying custom malware and establishing persistence that survives reboots and configuration resets.
Dave BittnerHOST
The group has previously exploited vulnerabilities in Ivanti and Citrix products, often expanding attacks once vulnerabilities become public.
Dave BittnerHOST
BeyondTrust has released a patch, but researchers warn that internet-facing appliances should be considered potentially compromised until thoroughly investigated.
Dave BittnerHOST
Google expects broader exploitation as attackers race against patch deployments.
Johannes UllrichHOST
Again, this vulnerability is also already being attacked.
Johannes UllrichHOST
And well, good things usually come in threes, so we also got a zero-day vulnerability that was patched by Ivanti a couple days ago.
Johannes UllrichHOST
Must have missed it.
Johannes UllrichHOST
Uh, sometimes hard to keep those zero days apart.
Johannes UllrichHOST
Volexity actually has a real good write-up about what exactly happened here, and I will include a link to Volexity as well as to the Ivanti advisory.
Johannes UllrichHOST
Volexity identified three different vulnerabilities here that are chained to full system compromise.
Johannes UllrichHOST
The first one is an authentication bypass vulnerability, followed by an arbitrary file write SPEEK remote code execution vulnerability, and then finally a privilege escalation vulnerability.
Johannes UllrichHOST
Now, Ivanti decided to patch the first two vulnerabilities, only give them one CVE number, so basically combined both vulnerabilities into one.
Jason EdwardsHOST
Attacks on supermarket refrigeration systems spoiled food, caused fires, and drove losses into the millions, bringing operational technology risk into clear business focus.
Jason EdwardsHOST
At the same time, attackers gained deep access through Ivanti gateways that were fully patched when intrusions began, proving that updates alone cannot establish whether an edge device is clean.
Jason EdwardsHOST
A separate espionage operation used a compromised BeyondTrust support appliance to reach downstream systems, pursue credentials, and collect sensitive documents.
Jason EdwardsHOST
The wider issue also examines an industrial phishing marketplace and artificial intelligence safety tests that crossed into live government websites.
Jason EdwardsHOST
The larger lesson is that cyber risk becomes physical risk when connected equipment controls real-world conditions.
Jason EdwardsHOST
The recommendation is to remove refrigeration controllers from direct internet exposure, restrict approved remote access, and update or replace unsupported systems.
Jason EdwardsHOST
Next, corporate credentials were stolen through fully patched Ivanti gateways.
Jason EdwardsHOST
Attackers gained unauthenticated root-level access to Ivanti Connect Secure Gateways and searched for valuable corporate credentials.
Paul AsadoorianHOST
This week in the security news, convert this router into an SDR.
Paul AsadoorianHOST
Ivanti straight to root.
Paul AsadoorianHOST
Anthropic AI worm FUD.
Paul AsadoorianHOST
A kernel exploit to fix downloads.
Paul AsadoorianHOST
This week in the security news: convert this router into an SDR.
Paul AsadoorianHOST
Ivanti straight to root.
Paul AsadoorianHOST
Anthropic AI worm FUD.
Paul AsadoorianHOST
A kernel exploit to fix downloads.
Paul AsadoorianHOST
This week in the security news: convert this router into an SDR.
Paul AsadoorianHOST
Ivanti straight to root.
Paul AsadoorianHOST
Anthropic AI worm FUD.
Paul AsadoorianHOST
A kernel exploit to fix downloads.
24 more episodes mention Ivanti.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.