Ivanti

Why Autonomous Endpoint Management Depends on Trusted Data Back to Basics: AEM Fundamentals | Part 1 of 5 The market is rushing toward autonomous endpoint management. But most of the conversation skips past the infrastructure and jumps straight to the outcomes. The market is loud, the promises are bold, and the buyers who got burned before are now the ones asking the hardest questions. They don't need another feature list. They need to know what's actually underneath the claims. IT teams have heard this story before. They've sat through the demos, read the analyst reports and signed the contracts, only to discover that "autonomous" was a label slapped on a dashboard that flags problems it can't fix. And yet the claimed outcomes are the exact ones IT teams have been wanting for years: Self-healing endpoints that detect and resolve their own issues before a ticket is ever filed Automated remediation that fixes problems at scale without human intervention Autonomous patching that closes v

It is not always possible to patch vulnerabilities as quickly as hackers exploit them, but recent figures show just how much this gap has widened. FortiGuard Labs estimates that the time between the disclosure of a critical vulnerability and its active exploitation has dropped sharply to between 24 and 48 hours. By contrast, Verizon’s 2026 Data Breach Investigations Report shows that organizations take a median of 43 days to complete vulnerability remediation. As many leaders in the global financial sector know all too well, a tremendous amount of damage can occur in the days and weeks between the exploitation of a vulnerability and the successful deployment of a patch. From the perspective of industry leaders, both figures are moving in the wrong direction. It used to be common for hackers to need a week to exploit a vulnerability. And the patching process also used to be faster: the current figure of 43 days is up from 32 days recorded twelve months earlier. Hackers are getting faste

Across Europe, organizations are navigating a rapidly changing cybersecurity and regulatory landscape. Customers are seeking solutions that help them strengthen resilience, simplify operations and meet evolving compliance expectations while supporting the flexibility and scale modern enterprises require.  At Ivanti, this shift is shaping how we prioritize investment, innovation and certification efforts. As part of that ongoing strategy, Ivanti has made the decision to withdraw Ivanti Endpoint Manager Mobile (EPMM) from its current certification process (certification ID BSI-DSZ-CC-1241). This decision does not change our commitment to supporting customers in Europe. Rather, it reflects where our customers’ needs, market demand and regulatory frameworks are moving: toward modern, cloud-connected and AI-enabled solutions designed for consistency, scalability, auditability and resilience.  Aligning Certification Priorities with Customer Needs  The market for standalone, on

What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix for a sixth 2026 zero-day. None of this is theoretical — all six are on CISA's Known Exploited Vulnerabilities catalog today, and two carry active nation-state attribution. Before we get into today's release, here's what defenders should already have handled — or should escalate immediately if not: Microsoft — confirmed exploited since (and including) the August release: CVE-2026-68820 — Windows Ancillary Function Driver for WinSock (afd.sys), Elevation of Privilege. Important, CVSS 7.0. A use-after-free flaw lets a locally authenticated attacker win a race condition and elevate to SYSTEM. Confirmed exploited in the wild as of the August release; Check Point Research ties active exploitation to the Lazarus group's Operation Dream Job campaign, deploying a new bu

Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit , and Ivanti uses leading technologies to proactively find and fix issues––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams and identify vulnerabilities that traditional tools have previously missed. Our philosophy is simple: discovering and communicating vulnerabilities and sharing that information with defenders is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is to get ahead of threat actors to ensure our customers can take the steps needed to protect their environments. To that end, today Ivanti is

Foreign Filing filed 2026-09-03

Foreign Filing filed 2026-09-01

Earlier this year, we introduced Ivanti Innovators Hub to bring together support, knowledge and community into a more unified experience.  That launch established a strong foundation for a more effortless and predictable experience. Now, we're building on it with new enhancements designed to make the Hub more personalized, connected and relevant, with integrated learning opportunities, stronger community engagement and more tailored experiences.  A more personalized experience  The latest enhancements make Innovators Hub more relevant to your organization, your products and your interests.  Content, support resources, communications, and opportunities are now surfaced in ways that help you spend less time searching and more time discovering what matters most.  Product tiles on the homepage make it easier to access the Ivanti solutions relevant to your organization, while personalized content and updates help surface the information that matters most to you.&nbs

Regardless of what everyone thinks about AI, it’s clear that patch acceleration based on identified vulnerabilities is forcing the patch management industry to deal with the Patch Apocalypse. The magic question is how do you deal with it when even Microsoft is recommending a three-day turnaround on patching to stay ahead of the ‘AI-accelerated’ threats? The challenge is that large enterprises are constrained by testing, change control and compatibility requirements. That challenge needs to be addressed by building a process to deploy patches that matter to mitigate risk in days and stay disciplined for everything else. The first step in this new process is to understand that not all CVEs are created equal. The patches need to be triaged to identify those CVEs that require immediate attention including those tied to known exploitation or disclosure, known malware, CISA’s KEV list, or internet-facing or unauthenticated vulnerabilities, etc. Once these CVEs are identified you can build a

Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit , and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is to get ahead of threat actors to ensure our customers can take the steps needed to protect their environments. To that end, today Ivanti is disclosing vulnerabilities in Ivanti Neurons for MDM and Endpoint Manag

Every IT leader has felt this tension: your organization has invested in AI, automation and digital operations, and yet outcomes still fall short of expectations. Even with the right tools and intent, you won’t be able to fully realize the value of your AI investments if they’re built on an unsteady foundation. The data confirms this challenge. Ivanti’s 2025 AITSM research found that 89% of organizations say siloed data negatively impacts IT operations, and 44% cite security and compliance concerns as barriers to IT automation. Ivanti’s 2026 AI Maturity Report reinforces the same pattern: 57% of organizations reported improved knowledge sharing between IT and security and 53% reported easier data sharing after establishing a unified AI approach based on a system of record. PwC's 2026 Digital Trends in Operations Survey adds a broader operations lens: 89% of operations leaders say technology investments haven’t fully delivered expected outcomes, and 87% report that poor data quality has