Tag

#VPN

18 stories taggedVPN.

Illustration: A server rack in a dimly lit data centre
Vulnerabilities

A Fresh Citrix Zero-Day Is Already Being Exploited, and Federal Agencies Have Three Days to Fix It

CVE-2026-88779 hit live networks almost immediately after Citrix shipped patches for two earlier flaws, leaving IT teams scrambling again.

3 min read
Illustration: a server rack bathed in deep blue and amber warning light
Vulnerabilities

Two Critical Check Point Flaws Are Being Actively Exploited and Federal Agencies Had Three Days to Patch

CISA added both vulnerabilities to its must-patch list on September 22, with a September 25 deadline for US government networks. One was a zero-day. The other had already been quietly targeted in the wild.

4 min read
A corporate network security gateway or firewall device being examined, with critical vulnerability alerts displayed on adjoining monitors showing password bypa
Vulnerabilities

Check Point Fixes Two Critical VPN Flaws That Could Let Hackers In Without a Password

Both bugs score 9.8 out of 10 and affect the firewall gear that guards corporate networks.

3 min read
A VPN service infrastructure diagram showing an exposed test server with open configuration files displayed, engineering credentials and build artifacts visible
Breaches

Surfshark Admits Hackers Reached Internal Test Server After Config Slip

The VPN provider says customer traffic and identities were untouched, but engineering credentials and build files sat exposed on the open internet for days.

4 min read
A network security technician working at a control station with VPN authentication systems displayed, emergency patches being deployed to remote-access boxes sh
Vulnerabilities

SonicWall Patches Two VPN Zero-Days Already Being Used by Hackers

A perfect-10 flaw in SonicWall's SMA 1000 remote-access boxes lets attackers slip past the login screen, and it's being paired with a second bug in real attacks.

3 min read
A firewall management console displaying multiple critical vulnerability alerts at severity level 9
Vulnerabilities

WatchGuard Patches Five Critical Flaws That Could Let Attackers Seize Control Remotely

WatchGuard has fixed more than two dozen vulnerabilities in its firewall software and management tools, including five rated 9.3 out of 10 in severity.

3 min read
Enterprise network gateway hardware with warning lights active and security personnel examining the device while patch deployment screens glow on adjacent works
Vulnerabilities

Citrix Patches Critical Login-Bypass Flaw in NetScaler, Attacks Expected Soon

A security hole rated 9.3 out of 10 lets criminals walk straight past the login screen on widely used corporate network gear. Patches are out now, and researchers say exploitation is a matter of when, not if.

3 min read
A web browser window showing the extension management page with numerous fake VPN add-ons installed, their permission requests and data collection warnings visi
Identity & Access

737 Fake VPN Extensions in Chrome Store Quietly Hijacked Browsers

The free browser add-ons promised to unblock websites for Russian speakers. Instead they routed every page a user visited through servers the operators controlled.

4 min read
A firewall interface frozen mid-crash with error messages, surrounded by incoming attack vectors represented as red network pathways converging on the device
Vulnerabilities

Cisco firewalls are being crashed through a VPN flaw, and the fix is a full software upgrade

A high-severity bug in Cisco's Secure Firewall ASA and FTD software lets attackers reboot devices remotely with a single crafted web request. Cisco says the attacks started in August.

4 min read
A Windows system tray showing a VPN application icon with hidden backdoor processes running in the background, network traffic being redirected to unknown serve
Threat Intelligence

Trojanised QuickFox VPN installer plants stealth backdoor on users' PCs

Fortinet researchers say a tampered version of the China-focused VPN app has been serving the FDMTP backdoor since at least August 2025, with tradecraft that overlaps activity tracked as Silver Fox.

3 min read
A VPN gateway device with attack visualizations flowing across its display, ransomware propagation paths highlighted in red, an AI agent's autonomous actions sh
Ransomware

Ransomware gangs are going after VPNs, and an AI just ran its own attack

Ransomware attacks rose for the fourth month in a row in June, with criminals targeting the devices companies use to connect remote workers. A new AI-driven attack completed an entire break-in with no human at the keyboard.

3 min read
A split-screen view showing a data packet traveling through an encrypted tunnel on one side while remaining exposed and visible on the other, representing the j
Identity & Access

What is a VPN and when do you actually need one?

VPNs encrypt your internet traffic and hide your real IP address, but they are not a privacy cure-all. Here is when one genuinely helps and when it does not.

5 min read
Illustration for the story: SonicWall VPN Appliances Hit by Zero-Day Attacks Weeks Before Public Warning
Vulnerabilities

SonicWall VPN Appliances Hit by Zero-Day Attacks Weeks Before Public Warning

A newly identified group, tracked as UTA0533, broke into SonicWall SMA 1000 devices using unknown flaws from late June 2026 and gained the highest level of access on the affected hardware.

3 min read
Illustration: a dimly lit server room with rows of dark server racks, one rack visibly powered down with cables hanging loose
Ransomware

US sanctions a VPN, a malware disguiser, and the people behind them for helping ransomware gangs

Treasury targets 1VPNS and a Belarusian 'crypter' seller who together helped ransomware crews hit hospitals, banks and local governments.

3 min read
Editorial illustration for: US Treasury Sanctions VPN Provider Accused of Selling Cover to Ransomware Gangs
Policy & Regulation

US Treasury Sanctions VPN Provider Accused of Selling Cover to Ransomware Gangs

OFAC hits 1VPNS, its Ukrainian operator, and a malware cryptor seller, accusing them of helping ransomware crews attack American victims.

3 min read
© 2026 Threat Vectr