Data Breaches
Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people.
Hi, what are you looking for?
SecurityWeek
All posts tagged "VPN"
Vulnerabilities
Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.
Data Breaches
A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.
Ransomware
The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password.
Vulnerabilities
Remotely exploitable, the integer underflow vulnerability impacts StrongSwan releases spanning 15 years.
Malware & Threats
Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.
Data Breaches
The VPN company has conducted an investigation after a threat actor claimed to have hacked its systems.
Privacy
Citizen Lab has identified links between multiple VPN providers, and multiple security weaknesses in their mobile applications.
Incident Response
The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices.
Vulnerabilities
Palo Alto Networks and SonicWall VPNs affected by vulnerabilities allowing remote code execution and privilege escalation.
Malware & Threats
The DeepData malware framework was seen exploiting a Fortinet VPN client for Windows zero-day that remains unpatched.
Funding/M&A
Malwarebytes has acquired Sweden-based privacy-focused VPN provider AzireVPN to expand its product offerings.
Endpoint Security
The vulnerabilities, patched in OpenVPN 2.6.10, expose users on the Windows platform to remote code execution attacks.
Privacy
Researchers show how the Port Shadow technique against VPNs can allow MitM attacks, enabling threat actors to intercept and redirect traffic.
Malware & Threats
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
Identity & Access
Check Point is warning customers that threat actors are targeting insecure VPN instances for initial access to enterprise networks.
Vulnerabilities
A new VPN bypass technique allows threat actors to snoop on victims’ traffic by forcing it off the VPN tunnel using built-in features of...
Malware & Threats
Cisco has observed an increase in brute-force attacks targeting web application authentication, VPNs, and SSH services.
Network Security
Researchers at the Shadowserver Foundation identify thousands of internet-exposed Ivanti VPN appliances likely impacted by a recently disclosed vulnerability leading to remote code execution.
Vulnerabilities
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.
Vulnerabilities
Cybercrime
A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.
Malware & Threats
Artificial Intelligence
Identity & Access
