#credential-chain

Analysis · May 8, 2026 · The Field Notes Desk

Ivanti EPMM has produced a confirmed zero-day every year since 2023. Here's the full chain.

Twelve CVEs. Four exploitation waves. Three years. One product line. A complete accounting of Ivanti EPMM's zero-day history, from the Norwegian government breach to this week's credential chain.