Ivanti Gets Poor Marks for Cyber Incident Response

Multiple critical zero-day vulnerabilities in Ivanti Connect Secure and Policy Secure VPN appliances were disclosed in 2024, with several exploited in the wild before patches were available; CISA ordered federal agencies to disconnect affected devices until mitigations were applied. The report highlights delayed patch releases, additional newly discovered flaws, evidence of active exploitation (including activity attributed to Chinese state-aligned actors and probing IPs), and criticism of Ivanti’s security practices and incident response—advising cautious treatment of Ivanti appliances by enterprise defenders.