Dutch authorities confirmed an Ivanti zero-day exposed employee contact data. Patches dropped January 29 for two vulnerabilities scoring 9.8 on severity, both exploited in the wild before fixes shipped. Zero-days don't wait for convenient disclosure timelines.