Ivanti zero-day exploited after vendor delayed patch, internal review missed bar

Ivanti discovered a partial vulnerability in June during internal checks but deferred an out-of-band fix, allowing attackers to weaponize it into an exploited zero-day. The disclosure indicates a patch-management gap where severity thresholds delayed remediation until active exploitation. This underscores recurring risks in enterprise software supply chains and the need for faster patch cycles.