Skip to main content

Matt Capko

Oct 15, 2026

2:52
Talk to me about the details there.
2:54
Yeah, that's right.
2:55
I mean, this, this one gets a bit complicated.
2:57
So it's actually a trio of zero day vulnerabilities that attackers chained together.
3:02
This allowed them to bypass authentication, execute code remotely, and escalate privileges.
3:09
Ivanti disclosed and issued a patch for the authentication bypass and remote code execution components of that chain.
3:17
They combined that as a single vulnerability.

5 MINS LATER

8:37
But, I mean, even researchers, the researchers that you talked to were skeptical that even in the process that they are now a part of with this numbering authority, they were like, "W- we're not sure we can trust them."

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.