This article, which I found in @zackwhittaker’s most excellent newsletter that you should absolutely subscribe to, is extremely interesting: https://www.bloomberg.com/news/features/2026-02-19/vpn-used-by-us-government-failed-to-stop-china-state-sponsored-hackers

It’s behind a paywall and I totally do NOT recommend you use a website like removepaywall.com (using option 3) to view it without having to pay. That would be just unethical. Don’t do that.

@jerry @zackwhittaker Pulse Secure's problems started way before Ivanti. I was at NetScreen when we acquired Neoteris in 2003 - back then, the SSL VPN product was *fantastic*. The Juniper acquisition was the beginning of the decline - Pradeep didn't give a shit about anything that didn't run JunOS, so ScreenOS and Secure Access were among the many red-headed stepchildren that came into the product portfolio by acquisition and then were completely neglected.
When we found out the (rebranded) Pulse Secure line was being sold, I was initially excited at the chance to be something other than a wart - but Siris was chasing that 10x return and when they couldn't get it by generating more revenue, they started cutting headcount. Many of the developers, QA, and support engineers who understood the products were let go long before the Ivanti acquisition... which compounded the problem of an aging codebase and increasingly complicated set of bolt-ons as Siris chased the latest buzzwords.
This whole China debacle was *entirely* predictable and *entirely* avoidable. The incentives in the security industry are just fucked. (@haroonmeer absolutely nailed this back in 2019, btw: https://m.youtube.com/watch?v=GHuQC1qLnJ4 )
Keynote address: The security products we deserve

YouTube
@llorenzin I definitely recall pulse secure being a security problem before ivanti too. I didn't have the inside scoop, but it wasn't hard to guess what was going on. I guess the story is (maybe) highlighting that things went from bad to worse when Ivanti and PE came along. @zackwhittaker @haroonmeer
@jerry @zackwhittaker @haroonmeer oh, yeah - no shade to the original article, just trying to add some context. That whole mess just makes me sad.
@llorenzin @jerry @zackwhittaker @haroonmeer Thank you for that context (and thus for telling us the company and product being referred to).