Ivanti Pledges Security Overhaul the Day After 4 More Vulns Disclosed

Ivanti disclosed four new vulnerabilities in its Connect Secure and Policy Secure remote access products (including heap overflows and an XXE) amid a broader pattern of recent critical flaws and prior zero-days; attackers including Magnet Goblin have exploited some Ivanti remote-access bugs in the wild, prompting customer concern and a CISA emergency directive, while Ivanti pledges a complete security and engineering overhaul.