Article

In early 2024, the Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies to disconnect Ivanti's Connect Secure VPN software after it was hacked by Chinese spies, affecting nearly two dozen organizations. The software, widely used across U.S. government and corporate sectors, was found to have vulnerabilities that were exploited by state-sponsored hackers.

The incident raised concerns about the impact of private equity ownership on cybersecurity, as Ivanti faced financial pressures and staffing cuts, leading to a decline in product security. The situation has prompted a reevaluation of cybersecurity software risks among government and private sectors.