Limited attacks occurred prior to Ivanti’s disclosure, followed by mass exploitation by multiple threat groups. More than 1,400 potentially vulnerable instances remain exposed.
A poll worker helps a person cast their ballot at Fifteenth Avenue Baptist Church on December 2, 2025 in Nashville, Tennessee. Voters head to the polls to fill the house seat left vacant after the resignation of Republican Mark Green. (Photo by Jon Cherry/Getty Images)
Attackers have exploited the critical defect to reconfigure firewall settings and create unauthorized accounts with privileged access to multiple versions of the vendor’s security products.
Retired Lt. Gen. Charlie “Tuna” Moore, former deputy commander of U.S. Cyber Command, joins Safe Mode to break down his new paper on “dominating the digital space”…
Madhu Gottumukkala, acting director of the Cybersecurity and Infrastructure Security Agency, testifies during the DHS oversight hearing in the Cannon House office building on Jan. 21, 2026. The hearing covered a full oversight into the Department of Homeland Security, CISA, TSA and S&T. (Photo by Heather Diehl/Getty Images)
Homeland Security Secretary Kristi Noem arrives for a Senate Appropriations Committee hearing in the Dirksen Senate Office Building on Capitol Hill on May 8, 2025. Noem testified before the Homeland Security Subcommittee about her department’s FY 2026 budget request. (Photo by Andrew Harnik/Getty Images)
The legislation also includes mandates on election security funding and CISA staff levels, as well as an extension of a state and local cyber grant program.