Ivanti

Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit , and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is to get ahead of threat actors to ensure our customers can take the steps needed to protect their environments. To that end, today Ivanti is disclosing vulnerabilities in Ivanti Neurons for MDM and Endpoint Manag

Every IT leader has felt this tension: your organization has invested in AI, automation and digital operations, and yet outcomes still fall short of expectations. Even with the right tools and intent, you won’t be able to fully realize the value of your AI investments if they’re built on an unsteady foundation. The data confirms this challenge. Ivanti’s 2025 AITSM research found that 89% of organizations say siloed data negatively impacts IT operations, and 44% cite security and compliance concerns as barriers to IT automation. Ivanti’s 2026 AI Maturity Report reinforces the same pattern: 57% of organizations reported improved knowledge sharing between IT and security and 53% reported easier data sharing after establishing a unified AI approach based on a system of record. PwC's 2026 Digital Trends in Operations Survey adds a broader operations lens: 89% of operations leaders say technology investments haven’t fully delivered expected outcomes, and 87% report that poor data quality has

Warehouse workers don’t think about whether their mobile interface runs on a browser. They’re focused on getting the job done. But for operations and IT teams evaluating or upgrading mobile technology in supply chain environments , platform choice matters more than most people realize. Consumer mobile browsers such as Safari, Edge and Chrome are useful tools designed for everyday web use. They help people search, shop, read, collaborate and access web applications from almost anywhere. That versatility is exactly what makes them the wrong choice for the warehouse floor. Work in the supply chain and other industrial operations is different. Workers are using rugged handheld devices, wearable data-capture systems, vehicle-mounted computers and tablets built for long shifts, fast barcode scanning and repeated task transactions. They aren’t browsing the web. They’re completing assigned task workflows. So, the question operations managers need to ask isn’t, “Can this page open in a browser?

Foreign Filing filed 2026-07-29

Your employees aren't trying to create compliance incidents by using AI tools. They're trying to finish their work faster. According to a 2026 BCG survey , 74% of frontline employees now use generative AI every day or a few times a week. When an employee uses an enterprise AI assistant to summarize a customer contract before a meeting, another pastes application logs into a public generative AI tool to troubleshoot an issue, or a developer relies on an AI coding assistant connected to an internal knowledge base, each action moves organizational data into a new processing pipeline that traditional security and privacy programs were not designed to govern. Unlike traditional applications, generative AI processes retrieve enterprise data, maintain context, create new content and may log interactions for improvement or audit purposes. Each of these stages introduces a potential exposure point and broadens your organization’s attack surface . For data privacy and compliance teams , the use

Patch Tuesday Watch: What Led Up to July 2026 Adobe Release date: June 30, 2026 (APSB26-68 — ColdFusion; same-day bulletin for Campaign Classic) CVE count: 11 CVEs in ColdFusion, 1 in Campaign Classic (12 total) Adobe's ColdFusion update resolved 11 vulnerabilities across ColdFusion 2025 (Update 9 and earlier) and ColdFusion 2023 (Update 20 and earlier), including seven rated CVSS 10.0: Fixed in ColdFusion 2025 Update 10 and ColdFusion 2023 Update 21. KEV callout: CVE-2026-48282 was not flagged as exploited at release, but exploitation began within roughly two hours of a public technical writeup on July 2. CISA added it to KEV on July 7, with a federal remediation deadline of July 10 — already passed. Any internet-facing ColdFusion instance still unpatched should be treated as an active incident, not a routine patch item. Campaign Classic's CVE-2026-48286 (CVSS 10.0, incorrect authorization → arbitrary code execution) affects on-premise ACC v7 builds 7.4.3 and earlier. Adobe-hosted ins

Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit , and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that information with defenders, is not an indication of weakness; rather it is evidence of rigorous scrutiny and a proactive vulnerability management program. By aggressively seeking to identify and address vulnerabilities, our aim is to get ahead of threat actors to ensure our customers can take the steps needed to protect their environments. To that end, today Ivanti is disclosing vulnerabilities in Ivanti Xtraction. It is important for cus

Apple Declarative Device Management (DDM) is now the standard for device management across Apple platforms. As part of this transition, Apple is retiring legacy software update controls in iOS 27, iPadOS 27, macOS Golden Gate, watchOS 27, visionOS 27, tvOS 27 and later releases. This is just one of several platform changes arriving this fall that could impact how your team manages and secures Apple devices. The good news? Ivanti has supported Declarative Device Management for more than a year, giving customers a headstart on Apple's transition and the modern management capabilities that come with it. Here's what you need to know, what's changing and the steps you should take to prepare. Apple Intelligence and Apple Foundation Models: WWDC 2026 AI announcements WWDC 2026, Apple’s 37th Worldwide Developer’s Conference, introduced a rebuilt AI foundation developed in collaboration with Google’s Gemini technology. Apple now ships four models: Two run entirely on-device, including a new mul

Foreign Filing filed 2026-07-09

Organizations today invest heavily in discovery tools, expecting that increased visibility will solve their IT challenges. Yet when an incident hits, a patch fails or an audit looms, many teams must pause to reconcile spreadsheets, validate inventories and confirm ownership before they can act. Visibility alone doesn’t close the gap between insight and execution. The real value of discovery appears when visibility is governed and connected directly to the systems that run your business — enabling action without delay. Modern organizations can't rely on static inventories or scheduled scans. They need discovery that works continuously, fuels automation and validates outcomes. This is how organizations move from simply knowing their environment to acting on insights with confidence. Why teams can’t afford gaps in IT asset visibility Hybrid IT complexity continues to rise. Ivanti’s 2025 State of Cybersecurity Report found that 55% of organizations struggle with siloed IT and security data

Foreign Filing filed 2026-07-06