2025 and VPN - Cyber Security Informer

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

MARCH 17, 2025

Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. How AI and automation are amplifying the scale and sophistication of VPN attacks.

VPN

VPN Authentication Ransomware Risk

CVE-2025-20271: Cisco Meraki VPN Bug Exposes MX and Z Series Devices to Remote DoS Attacks

Penetration Testing

JUNE 18, 2025

Cisco warns of a critical flaw (CVE-2025-20271, CVSS 8.6) in Meraki MX/Z Series devices, allowing unauthenticated remote DoS on AnyConnect VPN. Update firmware now!

VPN

VPN Firmware Cybersecurity

Attackers exploited SonicWall SMA appliances since January 2025

Security Affairs

APRIL 19, 2025

Threat actors are actively exploiting a remote code execution flaw in SonicWall Secure Mobile Access (SMA) appliances since January 2025. Arctic Wolf researchers warn that threat actors actively exploit a vulnerability, tracked as CVE-2021-20035 (CVSS score of 7.1), in SonicWall Secure Mobile Access (SMA) since at least January 2025.

Firewall

Firewall Passwords VPN Accountability

Top 11 Dangerous VPN Providers to Avoid in 2025

SecureBlitz

MAY 13, 2025

Here, I will show you the top dangerous VPN providers and the top red flags to identify and avoid dangerous VPN providers in 2024. In today’s digital landscape, a Virtual Private Network (VPN) has become an essential tool for many internet users.

VPN

VPN Internet Internet Encryption

News Alert: INE Security outlines top 5 training priorities emerging from RSAC 2025

The Last Watchdog

MAY 13, 2025

Top 5 Cybersecurity Imperatives from RSAC 2025 1. Research presented at RSAC 2025’s cloud security sessions by the Cloud Security Alliance found that although misconfigurations appear in a majority of real-world breaches, over 50% of organizations rate them as a low-to-moderate risk.

Architecture

Architecture Risk Cybersecurity Cyber Attacks

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

The Hacker News

MAY 25, 2025

The campaign, first detected by Rapid7 in February 2025, involves the use of a multi-stage, memory-resident loader called Catena. Cybersecurity researchers have disclosed a malware campaign that uses fake software installers masquerading as popular tools like LetsVPN and QQ Browser to deliver the Winos 4.0

Malware

Malware VPN Software Cybersecurity

Popular VPNs are routing traffic via Chinese companies, including one with link to military

Malwarebytes

APRIL 3, 2025

That’s according to a report from the non-profit Tech Transparency Project (TTP), who investigated the top 100 mobile VPN apps downloaded from Apple’s App Store as documented by mobile intelligence company AppMagic. Mobile VPNs are apps that connect your smartphone to the internet via different computers around the world.

VPN

VPN Mobile Government Technology

CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

NetSpi Technical

MAY 28, 2025

During a recent host-based penetration test, NetSPI discovered multiple arbitrary SYSTEM file delete vulnerabilities in SonicWall NetExtender for Windows, a popular enterprise VPN client. NetSPI identified an arbitrary SYSTEM file overwrite vulnerability which can be leveraged for denial of service, tracked as CVE-2025-23010.

Penetration Testing

Penetration Testing VPN Software Engineering

86 million AT&T customer records reportedly up for sale on the dark web

Zero Day

JUNE 6, 2025

X Trending Memorial Day tech sales 2025 Memorial Day TV sales 2025 Memorial Day lawn & outdoor sales 2025 Memorial Day phone sales 2025 Memorial Day health tracker sales 2025 Memorial Day headphone sales 2025 Memorial Day laptop sales 2025 Best CRM software of 2025 Best small business CRM software of 2025 Best free website builders of 2025 Best (..)

Password Management

Password Management Passwords Identity Theft Software

News alert: Case dismissed against VPN executive, affirms no-logs policy as a valid legal defense

The Last Watchdog

APRIL 28, 2025

28, 2025, CyberNewswire — Windscribe , a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection with an alleged internet offence by an unknown user of the service. .”

VPN

VPN Advertising Internet Internet

SonicWall warns of an exploitable SonicOS vulnerability

Security Affairs

JANUARY 8, 2025

The vulnerability resides in SSL VPN and SSH management and according to the vendor is “susceptible to actual exploitation.” Again, this upgrade addresses a high vulnerability for SSL VPN users that should be considered at imminent risk of exploitation and updated immediately. hardware firewalls: SonicOS 6.5.5.1-6n

Firewall

Firewall Firmware VPN Authentication

ThreatLabz 2025 VPN Report: Why 81% of Organizations Plan to Adopt Zero Trust by 2026

Security Boulevard

APRIL 10, 2025

VPN technologies have long been a backbone of remote access but according to new ThreatLabz research, the security risks and performance challenges of VPNs may be rapidly changing the status quo for enterprises. Overall, 65% of organizations plan to replace VPN services within the year, a 23% jump from last years findings.

VPN

VPN Risk Internet Internet

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

The Hacker News

MAY 3, 2025

The activity, which lasted from at least May 2023 to February 2025, entailed "extensive espionage operations and suspected network prepositioning a tactic often used to maintain persistent access for future

VPN

VPN Malware

News alert: Seraphic launches BrowserTotal™ — a free AI-powered tool to stress test browser security

The Last Watchdog

JUNE 9, 2025

Tel Aviv, Israel, June 9, 2025, CyberNewswire — Seraphic Security , a leader in enterprise browser security, today announced the launch of Browser Total , a unique and proprietary public service enabling enterprises to assess their browser security posture in real-time. Users can book a demo time in advance here.

Marketing

Marketing Risk CISO Architecture

Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324

Security Affairs

MAY 6, 2025

In April, ReliaQuest researchers warned that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited. SAP addressed the flaw with the release of the April 2025 Security Patch Day. Thousands of internet-facing applications are potentially at risk.

VPN

VPN Hacking Internet Internet

CVE-2025-22457: UNC5221 Exploits Ivanti Zero-Day Flaw to Deploy TRAILBLAZE and BRUSHFIRE Malware

Penetration Testing

APRIL 3, 2025

Ivanti has recently disclosed a critical security vulnerability, identified as CVE-2025-22457, affecting several of its widely-used products. The The post CVE-2025-22457: UNC5221 Exploits Ivanti Zero-Day Flaw to Deploy TRAILBLAZE and BRUSHFIRE Malware appeared first on Daily CyberSecurity.

Malware

Malware Cybersecurity VPN

Why SMS two-factor authentication codes aren't safe and what to use instead

Zero Day

JUNE 17, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Authentication

Authentication Password Management Small Business Passwords

Privacy Roundup: Week 13 of Year 2025

Security Boulevard

MARCH 31, 2025

This is a news item roundup of privacy or privacy-related news items for 23 MAR 2025 - 29 MAR 2025. Privacy Without Compromise: Proton VPN is Now Built Into Vivaldi Vivaldi Vivaldi integrates ProtonVPN natively into its desktop version of its browser. Information and summaries provided here are as-is for warranty purposes.

VPN

VPN Surveillance Malware Data breaches

The 5 Fastest VPNs for 2025

Tech Republic Security

JANUARY 6, 2025

Explore the fastest VPNs for secure, high-speed browsing. Discover VPN services that protect your data and ensure smooth streaming and safe internet access.

VPN

VPN Internet Internet

Apple quietly makes running Linux containers easier on Macs

Zero Day

JUNE 13, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Password Management

Password Management Small Business Energy and Utilities Artificial Intelligence

Root Access Unlocked: Public PoC Exposes GlobalProtect macOS Privilege Escalation Flaw

Penetration Testing

JUNE 11, 2025

Leave a Reply Cancel reply You must be logged in to post a comment.

Penetration Testing

Penetration Testing VPN DDOS Advertising

Best Anti-Pharming Software For 2025

SecureBlitz

MARCH 12, 2025

The term pharming comes from combining two words: phishing because […] The post Best Anti-Pharming Software For 2025 appeared first on SecureBlitz Cybersecurity. Therefore, using reliable anti-pharming software is the best way to prevent this.

Software

Software Phishing Cybersecurity Antivirus

Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs

Troy Hunt

FEBRUARY 25, 2025

Let's try VPN'ing into Manilla: And suddenly, a password reset gives me exactly what I need: That's a little tangent from stealer logs, but Netflix obviously applies some geo-fencing logic to certain features. Another path had "ve", so it was off to Caracas and the Venezuelan victim's account was confirmed.

Passwords

Passwords Accountability VPN Malware

Privacy Roundup: Week 12 of Year 2025

Security Boulevard

MARCH 24, 2025

This is a news item roundup of privacy or privacy-related news items for 16 MAR 2025 - 22 MAR 2025. Additionally, Arcane steals a wide range of user data, including VPN account credentials, gaming client information, messaging apps, and information stored in various web browsers.

Surveillance

Surveillance Telecommunications Data breaches Spyware

How global threat actors are weaponizing AI now, according to OpenAI

Zero Day

JUNE 6, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Artificial Intelligence

Artificial Intelligence Password Management Small Business Passwords

Norton vs McAfee: Compare Antivirus Software 2025

eSecurity Planet

NOVEMBER 12, 2024

Aside from antivirus, Norton offers ransomware and hacking protection, privacy monitoring, and a VPN. Even McAfee’s most basic plan includes a VPN, identity monitoring, and text scam detection. McAfee Essential offers web browsing protection, VPN, and identity monitoring. 5 Pricing: 3.7/5 5 Core features: 3.5/5 5 Pricing: 4.7/5

Antivirus

Antivirus Software Identity Theft Spyware

7 trends shaping digital transformation in 2025 - and AI looms large

Zero Day

JUNE 16, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Digital transformation

Digital transformation Password Management Artificial Intelligence Small Business

Here's why network infrastructure is vital to maximizing your company's AI adoption

Zero Day

JUNE 14, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Artificial Intelligence

Artificial Intelligence Password Management Small Business Digital transformation

Privacy Roundup: Week 7 of Year 2025

Security Boulevard

FEBRUARY 17, 2025

This is a news item roundup of privacy or privacy-related news items for 9 FEB 2025 - 15 FEB 2025. Privacy Services Mullvad has partnered with Obscura VPN Mullvad Mullvad announces its partnership with ObscuraVPN; Mullvad WireGuard VPN servers can be used as the exit hop for the two-party VPN service offered by ObscuraVPN.

Surveillance

Surveillance Data breaches VPN Malware

SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root

The Hacker News

MAY 8, 2025

The vulnerabilities are listed below - CVE-2025-32819 (CVSS score: 8.8) - A vulnerability in SMA100 allows a remote authenticated attacker with SSL-VPN user privileges to bypass the path traversal checks and delete an

VPN

VPN Mobile Authentication

Ivanti Zero-Day CVE-2025-22457 Exploit Details Released

Penetration Testing

APRIL 10, 2025

Researchers at Rapid7 published technical details and proof-of-concept exploit code for a critical zero-day vulnerability in Ivanti Connect Secure, tracked as CVE-2025-22457. The vulnerability resides in the HTTP(S) web […] The post Ivanti Zero-Day CVE-2025-22457 Exploit Details Released appeared first on Daily CyberSecurity.

Cybersecurity

Cybersecurity VPN Network Security

16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself

Zero Day

JUNE 22, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Passwords

Passwords Data breaches Password Management Accountability

ASUS routers with AiCloud vulnerable to auth bypass exploit

Security Affairs

APRIL 18, 2025

ASUS warns of an authentication bypass vulnerability, tracked as CVE-2025-2492 (CVSS v4 score: 9.2), which impacts routers with AiCloud enabled. ASUS warns of an authentication bypass vulnerability in routers with AiCloud enabled that could allow unauthorized execution of functions on the device. ” concludes the security advisory.

Firmware

Firmware Authentication Passwords VPN

Heard about the 16 billion passwords leak? Here are the facts and how to protect yourself

Zero Day

JUNE 20, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Passwords

Passwords Data breaches Password Management Identity Theft

I upgraded my Pixel 9 Pro to Android 16 - here's what I love (and what's still missing)

Zero Day

JUNE 20, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Password Management

Password Management Small Business Artificial Intelligence Software

Critical Blink Router Flaws (CVSS 9.8) Allow Remote Root Code Execution via Unauthenticated Attacks

Penetration Testing

JUNE 15, 2025

Skip to content June 16, 2025 Linkedin Twitter Facebook Youtube Daily CyberSecurity Primary Menu Home Cyber Criminals Cyber Security Data Leak Linux Malware Vulnerability Submit Press Release Vulnerability Report Windows Search for: Home News Vulnerability Report Critical Blink Router Flaws (CVSS 9.8)

Firmware

Firmware DNS Penetration Testing Advertising

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 29, 2025

Cybersecurity and Infrastructure Security Agency (CISA) added SAP NetWeaver flaw, tracked as CVE-2025-31324 , to its Known Exploited Vulnerabilities (KEV) catalog. Last week, researchers warned that a zero-day vulnerability, tracked as CVE-2025-31324 (CVSS score of 10/10), in SAP NetWeaver is potentially being exploited.

VPN

VPN Risk Hacking Internet

Forget Ray-Bans: The $499 Meta Oakley smart glasses are better in almost every way

Zero Day

JUNE 20, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Password Management

Password Management Small Business Artificial Intelligence Software

North Korea-linked APT Moonstone used Qilin ransomware in limited attacks

Security Affairs

MARCH 10, 2025

Microsoft observed a North Korea-linked APT group, tracked as Moonstone Sleet, deploying Qilin ransomware in limited attacks since February 2025. The attackers breached the organization via compromised credentials for a VPN portal that lacked multi-factor authentication (MFA). ” Microsoft wrote on X.

Ransomware

Ransomware Healthcare VPN Malware

Your Android phone just got a big upgrade for free - these Pixel models included

Zero Day

JUNE 17, 2025

Here's how to buy one Nintendo Switch 2 revealed: Specs, pricing, release date (out now), and more official details The $700 Android phone that made me forget about my Pixel 9 Pro Best small business web hosting services of 2025 Memorial Day headphone sales 2025 Best Linux VPNs of 2025 Best online video editors of 2025 Best CRM software of 2025 (..)

Password Management

Password Management Small Business Artificial Intelligence Software

U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

APRIL 7, 2025

Cybersecurity and Infrastructure Security Agency (CISA) added an Apache Tomcat path equivalence vulnerability, tracked as CVE-2025-22457 , to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability CVE-2025-22457 is a stack-based buffer overflow that allows remote unauthenticated remote code execution.

Malware

Malware Cybersecurity Hacking Software

U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

FEBRUARY 18, 2025

The two vulnerabilities are: CVE-2025-0108 Palo Alto PAN-OS Authentication Bypass Vulnerability CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Researchers recently warned that threat actors exploit a recently disclosed vulnerability, CVE-2025-0108, in Palo Alto Networks PAN-OS firewalls. states GreyNoise.

Firewall

Firewall Firmware Authentication VPN

Google now allows digital fingerprinting of its users

Malwarebytes

FEBRUARY 19, 2025

But, per Googles announcement on December 19, 2024, organizations that use its advertising products can use fingerprinting techniques from last Sunday, February 16, 2025. Try Malwarebytes Privacy VPN. We think this subverts user choice and is wrong. Well, as far as Google is concerned that is.

Advertising

Advertising VPN Internet Internet

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Security Affairs

MARCH 14, 2025

The threat actor exploited CVE-2024-55591 and CVE-2025-24472 in FortiOS and FortiProxy to gain super-admin access on vulnerable Fortinet appliances. “CVE-2024-55591 and CVE-2025-24472 allow unauthenticated attackers to gain super_admin privileges on vulnerable FortiOS devices (<7.0.16) with exposed management interfaces.”

Firewall

Firewall Ransomware VPN Encryption

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

CVE-2025-20271: Cisco Meraki VPN Bug Exposes MX and Z Series Devices to Remote DoS Attacks

Trending Sources

Attackers exploited SonicWall SMA appliances since January 2025

Top 11 Dangerous VPN Providers to Avoid in 2025

News Alert: INE Security outlines top 5 training priorities emerging from RSAC 2025

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

Popular VPNs are routing traffic via Chinese companies, including one with link to military

CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

86 million AT&T customer records reportedly up for sale on the dark web

News alert: Case dismissed against VPN executive, affirms no-logs policy as a valid legal defense

SonicWall warns of an exploitable SonicOS vulnerability

ThreatLabz 2025 VPN Report: Why 81% of Organizations Plan to Adopt Zero Trust by 2026

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

News alert: Seraphic launches BrowserTotal™ — a free AI-powered tool to stress test browser security

Experts warn of a second wave of attacks targeting SAP NetWeaver bug CVE-2025-31324

CVE-2025-22457: UNC5221 Exploits Ivanti Zero-Day Flaw to Deploy TRAILBLAZE and BRUSHFIRE Malware

Why SMS two-factor authentication codes aren't safe and what to use instead

Privacy Roundup: Week 13 of Year 2025

The 5 Fastest VPNs for 2025

Apple quietly makes running Linux containers easier on Macs

Root Access Unlocked: Public PoC Exposes GlobalProtect macOS Privilege Escalation Flaw

Best Anti-Pharming Software For 2025

Processing 23 Billion Rows of ALIEN TXTBASE Stealer Logs

Privacy Roundup: Week 12 of Year 2025

How global threat actors are weaponizing AI now, according to OpenAI

Norton vs McAfee: Compare Antivirus Software 2025

7 trends shaping digital transformation in 2025 - and AI looms large

Here's why network infrastructure is vital to maximizing your company's AI adoption

Privacy Roundup: Week 7 of Year 2025

SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root

Ivanti Zero-Day CVE-2025-22457 Exploit Details Released

16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself

ASUS routers with AiCloud vulnerable to auth bypass exploit

Heard about the 16 billion passwords leak? Here are the facts and how to protect yourself

I upgraded my Pixel 9 Pro to Android 16 - here's what I love (and what's still missing)

Critical Blink Router Flaws (CVSS 9.8) Allow Remote Root Code Execution via Unauthenticated Attacks

U.S. CISA adds SAP NetWeaver flaw to its Known Exploited Vulnerabilities catalog

Forget Ray-Bans: The $499 Meta Oakley smart glasses are better in almost every way

North Korea-linked APT Moonstone used Qilin ransomware in limited attacks

Your Android phone just got a big upgrade for free - these Pixel models included

U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog

Google now allows digital fingerprinting of its users

SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacks

Stay Connected