Vulnerabilities
Palo Alto Networks and SonicWall VPNs affected by vulnerabilities allowing remote code execution and privilege escalation.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VPN"
Malware & Threats
The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched.
Funding/M&A
Malwarebytes has acquired Sweden-based privacy-focused VPN provider AzireVPN to expand its product offerings.
Endpoint Security
The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks.
Privacy
Researchers show how the Port Shadow technique against VPNs can allow MitM attacks, enabling threat actors to intercept and redirect traffic.
Malware & Threats
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
Identity & Access
Check Point is warning customers that threat actors are targeting insecure VPN instances for initial access to enterprise networks.
Vulnerabilities
A new VPN bypass technique allows threat actors to snoop on victims’ traffic by forcing it off the VPN tunnel using built-in features of...
Malware & Threats
Cisco has observed an increase in brute-force attacks targeting web application authentication, VPNs, and SSH services.
Network Security
Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.
Vulnerabilities
ExpressVPN disables split tunneling on Windows after learning that DNS requests were not properly directed.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Mobile & Wireless
Cloud Security
Artificial Intelligence
Artificial Intelligence
Vulnerabilities
Noteworthy stories that might have slipped under the radar: Capital One hacker’s sentence reversed, Google patches critical Chrome vulnerability, the story of an Expat...
Supply Chain Security
Artificial Intelligence