Ivanti commits to secure-by-design overhaul after vulnerability nightmare

Ivanti disclosed multiple high‑severity vulnerabilities in Connect Secure and Policy Secure that were exploited in the wild as zero‑days by several groups (including UNC5221 and China-linked espionage teams), causing widespread compromise risk and prompting CISA to order federal agencies to disconnect affected devices; the vendor faced delayed patching and unreliable integrity checks and has announced a security-by-design overhaul, faster patching, enhanced monitoring, and improved transparency to address the incidents.