BT and Ivanti launch telco-first remote eSIM installation for managed Android devices. July 02, 2026 - SALT LAKE CITY - BT Business and Ivanti are launching a new way of enabling businesses to switch on mobile connectivity for managed Android devices at scale. The new capability is a telco world first, handing organisations the ability to install eSIMs directly from their Mobile Device Management platform and activate on a device without physical handling or manual steps. It offers businesses a time and money saving way to prepare and manage their mobile fleets for up to thousands of workers. Using a single route, devices will either install eSIMs automatically or via a short installation process cutting the time to deliver from days to minutes. The partnership brings together Android's ecosystem, Ivanti's management capability and BT's mobile expertise to offer business customers a consistent method of deployment across their estates. The move paves the way for future services built around secure, remotely managed connectivity, giving businesses more flexibility as their workforces, devices and security needs evolve. "As organisations scale their mobile fleets, setting up connectivity must be as automated and manageable as the devices themselves," said Bruce Payne, Principal Field CTO at Ivanti. "Embedding eSIM installation and activation directly into the management workflow allows organisations to further standardise provisioning, reduce manual effort and maintain control as mobile estates grow. Working together with Android and BT, we're helping businesses improve user experience by removing unnecessary complexity and making large-scale Android deployments faster and more consistent." Sally Fuller, Mobile and Unified Mobility Director at BT said: "Customers want devices that are ready when their people need them. Working with Android and Ivanti has allowed us to create a simple and reliable way to switch on connectivity across Android devices. It removes processes which can slow organisations down and replaces it with a single digital process that works sustainably and at scale." About Ivanti Ivanti is a global enterprise IT and security software company dedicated to unlocking human potential by managing, automating and protecting data and systems to empower continuous innovation. With adaptable software solutions tailored to customer needs, Ivanti empowers IT and security teams to enhance operational efficiency, cut costs and proactively mitigate security risks. At the heart of Ivanti's offerings is the AI-powered Ivanti Neurons platform, which transforms the way IT and security teams operate. By delivering unified, reusable services and tools, the platform helps ensure consistent visibility, scalability, and secure solution implementation, enabling teams to work smarter, not harder. Ivanti follows "Secure by Design" principles to provide software solutions that scale with its customers' needs to help enable IT and Security to improve operational efficiency while reducing costs and proactively reducing risk. Ivanti fosters an inclusive environment where diverse perspectives are honored and valued, reflecting a commitment to a sustainable future for customers, partners, employees and the planet. Learn more at www.ivanti.com and follow Ivanti! on social media @GoIvanti. About BT Group BT Group is the UK's leading provider of fixed and mobile telecommunications and related secure digital products, solutions and services. BT Group consists of four customer-facing units: Consumer serves individuals and families in the UK; Business covers companies and public services in the UK; International serves multinational organisations headquartered outside the UK and overseas public sector customers; Openreach is an independently governed, wholly owned subsidiary wholesaling fixed access infrastructure services to its customers - over 700 communications providers across the UK. British Telecommunications plc is a wholly owned subsidiary of BT Group plc and encompasses virtually all businesses and assets of the BT Group. BT Group plc is listed on the London Stock Exchange. Press contacts. Press Contact

BT and Ivanti launch telco-first remote eSIM installation for managed Android devices. By Neil Trim on July 2, 2026 BT Business and Ivanti are launching a new way of enabling businesses to switch on mobile connectivity for managed Android devices at scale. The new capability is a telco world first, handing organisations the ability to install eSIMs directly from their Mobile Device Management platform and activate on a device without physical handling or manual steps. It offers businesses a time and money saving way to prepare and manage their mobile fleets for up to thousands of workers. Using a single route, devices will either install eSIMs automatically or via a short installation process cutting the time to deliver from days to minutes. The partnership brings together Android's ecosystem, Ivanti's management capability and BT's mobile expertise to offer business customers a consistent method of deployment across their estates. The move paves the way for future services built around secure, remotely managed connectivity, giving businesses more flexibility as their workforces, devices and security needs evolve. "As organisations scale their mobile fleets, setting up connectivity must be as automated and manageable as the devices themselves," said Bruce Payne, Principal Field CTO at Ivanti. "Embedding eSIM installation and activation directly into the management workflow allows organisations to further standardise provisioning, reduce manual effort and maintain control as mobile estates grow. Working together with Android and BT, we're helping businesses improve user experience by removing unnecessary complexity and making large-scale Android deployments faster and more consistent." Sally Fuller, Mobile and Unified Mobility Director at BT said: "Customers want devices that are ready when their people need them. Working with Android and Ivanti has allowed us to create a simple and reliable way to switch on connectivity across Android devices. It removes processes which can slow organisations down and replaces it with a single digital process that works sustainably and at scale."

Ivanti: Max severity Ivanti Sentry vulnerability now exploited in attacks. Critical Ivanti Sentry Flaw Exploited in the Wild Just Days After Patch Release Attackers are actively targeting a recently patched maximum-severity vulnerability (CVE-2026-10520) in Ivanti Sentry, a security gateway appliance that secures mobile device traffic to corporate systems. The flaw, an OS command injection weakness, allows threat actors to execute code with root privileges on exposed instances. Ivanti released patches on August 20 for affected versions (R10.5.2, R10.6.2, and R10.7.1), initially stating there was no evidence of exploitation. However, the Shadowserver Foundation reported the next day that attackers had already backdoored most exposed Sentry gateways. While Shadowserver's scans detected only 19 vulnerable instances with at least two confirmed compromised it warned that many more may be unreachable due to blocklisting, suggesting broader exploitation. Hackers frequently target Ivanti vulnerabilities to gain access to enterprise networks, often leading to data theft or further compromise. Recent incidents include zero-day exploits against government agencies and critical flaws in Endpoint Manager Mobile (EPMM), some of which were leveraged in ransomware attacks. The Cybersecurity and Infrastructure Security Agency (CISA) has flagged 34 Ivanti vulnerabilities as actively exploited in the wild, with 12 tied to ransomware campaigns. Ivanti's solutions are widely deployed, serving over 40,000 customers globally, including government and enterprise networks. Despite the urgency, Ivanti has not yet updated its advisory to reflect the ongoing attacks. "id": "IVA1781166735", "linkid": "ivanti", "type": "Vulnerability", "date": "6/2026", "severity": "100", "impact": "5", "explanation": "Attack threatening the organization's existence" {'affected_entities': [{'customers_affected': 'At least two confirmed, ' 'potentially more', 'industry': 'Cybersecurity', 'location': 'Global', 'name': 'Ivanti', 'size': '40,000+ customers', 'type': 'Technology Vendor'}], 'attack_vector': 'Exploiting unpatched vulnerability in Ivanti Sentry', 'data_breach': {'data_exfiltration': True, 'sensitivity_of_data': 'Corporate system access, mobile ' 'device traffic'}, 'date_publicly_disclosed': '2024-08-21', 'description': 'Attackers are actively targeting a recently patched ' 'maximum-severity vulnerability (CVE-2026-10520) in Ivanti ' 'Sentry, a security gateway appliance that secures mobile ' 'device traffic to corporate systems. The flaw, an OS command ' 'injection weakness, allows threat actors to execute code with ' 'root privileges on exposed instances. Hackers have backdoored ' 'most exposed Sentry gateways, with at least two confirmed ' 'compromised.', 'impact': {'brand_reputation_impact': True, 'data_compromised': True, 'identity_theft_risk': True, 'operational_impact': 'Potential unauthorized access to corporate ' 'systems', 'systems_affected': 'Ivanti Sentry gateways'}, 'initial_access_broker': {'backdoors_established': True, 'entry_point': 'Exploiting CVE-2026-10520', 'high_value_targets': 'Enterprise and government ' 'networks'}, 'investigation_status': 'Ongoing', 'motivation': ['Data theft', 'Further network compromise', 'Ransomware'], 'post_incident_analysis': {'corrective_actions': 'Patch deployment, enhanced ' 'monitoring for exploitation', 'root_causes': 'Unpatched vulnerability in Ivanti ' 'Sentry'}, 'ransomware': {'data_exfiltration': True}, 'recommendations': 'Apply Ivanti patches immediately, monitor for signs of ' 'compromise, and review CISA advisories for Ivanti ' 'vulnerabilities.', 'references': [{'source': 'Shadowserver Foundation'}, {'source': 'Ivanti Advisory'}, {'source': 'CISA'}], 'response': {'remediation_measures': 'Patch released (R10.5.2, R10.6.2, ' 'R10.7.1)'}, 'title': 'Critical Ivanti Sentry Flaw Exploited in the Wild Just Days After ' 'Patch Release', 'type': 'OS Command Injection', 'vulnerability_exploited': 'CVE-2026-10520'} Published by IBM Faces Whistleblower Allegations Over Alleged Breach Cover-Ups IBM is embroiled in a cybersecurity controversy following a whistleblower lawsuit filed... Jun 11, 2026 Capifrance Hit by Major Data Breach: Hacker Exposes 3.6 Million Records of 785,000 Individuals A cyberattack targeting Capifrance,... Jun 11, 2026 Threat Actors Exploit AWS and Google Cloud Logging to Evade Detection and Maintain Persistence Cybercriminals are increasingly targeting Amazon Web... Jun 11, 2026