Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

CVE-2026-104935, a high-severity authentication bypass and remote code execution vulnerability in Ivanti ICS, was only partially discovered and patched in July, leaving an opening for threat actors to exploit. The incomplete fix highlights ongoing challenges in vendor patching, as attackers continue to target the flaw in industrial control systems.