Ivanti, a Global IT Software Company, Has Experienced Two Zero-Day Attacks

Palo Alto Networks has reported that Ivanti, a global IT software company, has had two critical zero-day attacks in Ivanti Endpoint Manager Mobile. Attacks include installing malware and deploying web shells. The company states that the attacks aimed at very few customers, and recommends customers that have not yet patched to do so. The security weaknesses have been patched up in January, however sources state that vulnerabilities have been present since summer of 2025.