New SonicWall Flaw Hits VPN Gateways
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
21 results for “vpn”
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
Microsoft says a protocol fallback bug leaves enterprise VPN connections stuck in a connecting state; a temporary workaround exists.
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.
Dutch NCSC warns two critical Check Point VPN flaws could be exploited soon, after fixes shipped on September 9.
Two 9.8-rated certificate flaws in Check Point gateways carry fixes that some customers say they cannot access.
SonicWall patches two zero-days in SMA 1000 VPN appliances, warning of active exploitation that combines both flaws.
DPRK workers now target sales, marketing, and healthcare roles, using AI and VPNs to evade detection.
ToxicPanda 2.0 uses VPN permissions to block Google Play, adding 167 commands and targeting 349 apps.
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
An Akira affiliate rebooted a victim's PC into Safe Mode, breaking its own encryptor but still stealing data.
A high-severity ASA and FTD vulnerability is being exploited to crash devices remotely; hot fixes are available.
Threat actors are increasingly leveraging vulnerabilities in VPNs and firewalls to gain direct access to corporate networks.
Researchers have uncovered an Iran-linked campaign using fake VPNs and media players to deploy spyware against specific user groups.
A sophisticated threat actor utilized zero-day exploits to gain deep access to SonicWall VPN appliances before official patches existed.
A critical flaw in WireGuard Easy allows unauthenticated attackers to brute-force weak tokens and hijack VPN peer credentials.
A registry-level suspension of t.me links reveals how quickly infrastructure can be shuttered under OFAC sanction enforcement.
The US has sanctioned a VPN administrator and a cryptor vendor, escalating a crackdown on the ransomware supply chain.
Treasury sanctions VPN and cryptor suppliers to disrupt the underlying network that supports global ransomware operations.
Federal authorities have sanctioned a specialized VPN provider and a malware cryptor vendor to disrupt ransomware supply chains.