{"schema":"sb.node.v1","id":"sb:e/797e95556cc2058b2ebbd495","kind":"entity","label":{"text":"ivanti","locale":"en"},"identity":{"anchor":"label:en:ivanti","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-27T21:52:49.874381+00:00","releaseId":"sb-3aeeb6b7ac88","snapshot":"deploy c3284ae4a3d38581dc659912bd360d77a7366bd2"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":33,"separatePublishers":9,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim","receiptsOnTopic":{"state":"partial","share":0.273,"named":9,"of":33,"basis":"documents whose own title or summary lead names the subject, over every counted document that mentions it anywhere (the entity graph's measurement); receipts are drawn only from rows whose own title or URL names the subject (the entity graph's subject gate)","blind":["only 27% of the 33 documents measured name the subject in their own text; the rest mention it in passing, so standing.evidence.supporting overstates coverage about it"]}},"admission":{"state":"provisional","kind":"observed","kindBasis":"no-vocabulary-row","policy":"promotion (observed tier; not promoted)","reason":"seen recurring in the corpus and kept in the graph at the observation bar; not promoted into the vocabulary"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-09-22","to":"2026-10-26","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0: about 100% of mentions carry no typed assertion"]}},"dimensions":{"domains":["cybersecurity"],"activeDays":15,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":9,"byKind":{"observation":9},"items":[{"id":"sb:o/8f274b1a64e82071950db060","kind":"observation","label":"The Register · 2026-10-14 · Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks","url":"https://www.theregister.com/security/2026/10/14/ivanti-patches-connect-secure-zero-day-after-researchers-confirm-in-the-wild-attacks/5303095","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/8497f33a3346aa66da3af09f","kind":"observation","label":"shattered.io · 2026-10-14 · Ivanti VPN Zero-Day Hits CVSS 8.6, Root Still Open [2026]","url":"https://shattered.io/ivanti-connect-secure-cve-2026-104935-zero-day/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/a573c51f7f3a3359b2aaf41f","kind":"observation","label":"Darkreading · 2026-10-14 · Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles","url":"https://www.darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/bd688d509772167c5d49513a","kind":"observation","label":"SecurityWeek · 2026-10-14 · Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products","url":"https://www.securityweek.com/citrix-fortinet-ivanti-patch-29-vulnerabilities-across-their-products/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/586256c04271697f14179cb4","kind":"observation","label":"BleepingComputer · 2026-10-14 · CISA warns admins to immediately fix Ivanti flaw exploited as zero-day","url":"https://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/a8cc86d1dbb3b9e31d33ed4a","kind":"observation","label":"Help Net Security · 2026-10-14 · Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances","url":"https://www.helpnetsecurity.com/2026/10/14/ivanti-zero-days-gain-root-patched-vpn-appliances/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/a18d6ec4f64323d7fbdb7807","kind":"observation","label":"BleepingComputer · 2026-10-13 · Ivanti warns of Connect Secure zero-day exploited in attacks","url":"https://www.bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/1728d3ede134b96cfc2c775d","kind":"observation","label":"SecurityWeek · 2026-10-13 · Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN","url":"https://www.securityweek.com/ivanti-zero-day-chain-gave-attackers-root-access-to-fully-patched-vpn/","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}},{"id":"sb:o/99ea66b691f0097e6dff2245","kind":"observation","label":"The Hacker News · 2026-10-13 · Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far","url":"https://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.html","match":{"surface":"title","basis":"admitted by the entity graph's subject gate (title or URL); the headline names the subject as whole words (the door's on-topic test)"}}],"cursor":null,"order":"newest first; we keep the 9 newest receipts for this entity whose own title or URL (the entity graph's subject gate) names it; each says which in match. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":10,"byKind":{"co-mentioned":10},"items":[{"kind":"relation","label":"co-mentioned with cisa (16 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/718472e5c3a7f2d0cb85477d"},{"kind":"relation","label":"co-mentioned with ai (15 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/74d9bb74a258a0ea8b84832d"},{"kind":"relation","label":"co-mentioned with connect secure (12 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/07b485f9e559b036d556cb86"},{"kind":"relation","label":"co-mentioned with citrix (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/c6753a6abdc413d0c913b493"},{"kind":"relation","label":"co-mentioned with cvss (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/834d7038430389f0cddced78"},{"kind":"relation","label":"co-mentioned with ivanti connect secure (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/14db8b85aa9d36d8c340e97f"},{"kind":"relation","label":"co-mentioned with shell (11 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/82111a6dbc93eb9d3ede074a"},{"kind":"relation","label":"co-mentioned with infrastructure security agency (9 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/bcd2748ff83a82ef1d291d80"},{"kind":"relation","label":"co-mentioned with microsoft (9 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/67b01e9e7f2f00b4282f234b"},{"kind":"relation","label":"co-mentioned with ai agents (8 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/bbe08939532b3785c62d36e0"}],"cursor":null,"order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/797e95556cc2058b2ebbd495","mcp":"traverse {\"id\":\"sb:e/797e95556cc2058b2ebbd495\"}","page":"/entity/ivanti/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/797e95556cc2058b2ebbd495\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/797e95556cc2058b2ebbd495\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"free-record","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/797e95556cc2058b2ebbd495\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"free-record","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"free-record","call":"traverse {\"id\":\"sb:e/797e95556cc2058b2ebbd495\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"free-record","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history, which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"free-record","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"free-record","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"watch","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"watch","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"watch","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"watch","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"one-time-read","reason":"one-time Reads are not offered through this door; use ask"}]}