[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKrdR4rS_3MvQaAcHvyZOq3N_ZHl56_z7P99MOIZHbQE":3},{"article":4,"iocs":46,"watch_terms":51,"solutions":52,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"f35279f9-5c82-4240-9638-3a12057999cc","Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles","ivanti-ics-zero-day-attacks-highlight-vendor-patching-hurdles-788400","CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.","A critical zero-day vulnerability, CVE-2026-104935, affecting Ivanti's Industrial Control Systems (ICS) products has been exploited by threat actors. The vulnerability, which allows for authentication bypass and remote code execution, was only partially patched by Ivanti in July, leaving systems exposed. This highlights significant challenges in timely and complete patching within the ICS vendor ecosystem, potentially enabling sophisticated attacks.","Ivanti ICS zero-day exploits CVE-2026-104935, a critical auth bypass + RCE flaw.","https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fivanti-ics-zero-day-attacks-vendor-patching","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt5c7ce56f98018528\u002F6acfd608b8750c62d9a7bd46\u002Fpatching-Florencio_Horcajo_Alvarez-Getty-2270656800.jpg?width=720&quality=80&disable=upscale","2026-10-14T21:20:13+00:00","2026-10-14T22:00:08.42183+00:00",9,[17],{"name":18,"type":19},"Ivanti","vendor","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":20,"icon":22,"name":23,"slug":24},null,"Zero-day","zero-day",[26,31,36,41],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":37},{"id":38,"icon":22,"name":39,"slug":40},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":42},{"id":43,"icon":22,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47],{"type":48,"value":49,"context":50},"cve","CVE-2026-104935","High-severity authentication bypass + RCE vulnerability in Ivanti ICS products",[18],{"controls":53,"vendors":140},[54,83,111],{"slug":55,"name":56,"problem":57,"products":58},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":84,"name":85,"problem":86,"products":87},"patch-management","Automated patch management","Known holes get closed in days, not months.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":105,"vendor_name":18,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":112,"name":113,"problem":114,"products":115},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",[141],{"slug":105,"name":18,"logo_path":106,"roles":142},[143],"affected",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":159},"ivanti-ics-zero-day-exposes-vendor-patching-gaps-in-critical-infrastructure","Ivanti ICS Zero-Day Exposes Vendor Patching Gaps in Critical Infrastructure","A critical zero-day vulnerability in Ivanti's Industrial Control Systems products allowed threat actors to bypass authentication and execute remote code before a complete patch was available. Ivanti's partial patch released in July left systems exposed, illustrating how incomplete or delayed vendor remediation can extend the window of exploitation — particularly dangerous in ICS environments where uptime pressures often delay patching further. This incident underscores that organizations cannot rely solely on vendor patch timelines and must implement compensating controls while awaiting full remediation. The convergence of IT and OT environments in ICS settings amplifies the blast radius of such vulnerabilities, making robust network segmentation and monitoring essential layers of defense.",[149,150,151,152,153,154,155,156,157,158],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-82: Guide to ICS Security","NIST SI-2: Flaw Remediation","NIST AC-17: Remote Access","NIST SC-7: Boundary Protection","IEC 62443-2-1: Security Management System for IACS","NERC CIP-007-6: Systems Security Management","ITIL Change Management: Emergency Change Procedures",{}]