Can a VPN Be Hacked?
Tech Republic Security
APRIL 23, 2024
Learn about the potential vulnerabilities of VPNs and the measures you can take to enhance your VPN security.
New TunnelVision technique can bypass the VPN encapsulation
Security Affairs
MAY 8, 2024
TunnelVision is a new VPN bypass technique that enables threat actors to spy on users’ traffic bypassing the VPN encapsulation. Leviathan Security researchers recently identified a novel attack technique, dubbed TunnelVision, to bypass VPN encapsulation. The researchers referred to this result as “decloaking.”
VPN 
91
91 Join 29,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
CISA cautions against using hacked Ivanti VPN gateways even after factory resets
Bleeping Computer
FEBRUARY 29, 2024
Cybersecurity and Infrastructure Security Agency (CISA) revealed today that attackers who hack Ivanti VPN appliances using one of multiple actively exploited vulnerabilities may be able to maintain root persistence even after performing factory resets. [.]
VPN 117
117 
Cisco warns of large-scale brute-force attacks against VPN and SSH services
Security Affairs
APRIL 16, 2024
Cisco Talos warns of large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services. Pierluigi Paganini Follow me on Twitter: @securityaffairs and Facebook and Mastodon ( SecurityAffairs – hacking, brute-force )
VPN 130
130 
Akira ransomware gang spotted targeting Cisco VPN products to hack organizations
Security Affairs
AUGUST 22, 2023
The Akira ransomware gang targets Cisco VPN products to gain initial access to corporate networks and steal their data. The Akira ransomware has been active since March 2023, the threat actors behind the malware claim to have already hacked multiple organizations in multiple industries, including education, finance, and real estate.
VPN 95
95 
Fake VPN Chrome extensions force-installed 1.5 million times
Bleeping Computer
DECEMBER 22, 2023
Three malicious Chrome extensions posing as VPN (Virtual Private Networks) infected were downloaded 1.5 million times, acting as browser hijackers, cashback hack tools, and data stealers. [.]
VPN 140
140 
BreachForums admin jailed again for using a VPN, unmonitored PC
Bleeping Computer
JANUARY 5, 2024
The administrator behind the notorious BreachForums hacking forum has been arrested again for breaking pretrial release conditions, including using an unmonitored computer and a VPN. [.]
VPN 127
127 
South Korea's Nuclear Research agency hacked using VPN flaw
Bleeping Computer
JUNE 19, 2021
South Korea's 'Korea Atomic Energy Research Institute' disclosed yesterday that their internal networks were hacked last month by North Korean threat actors using a VPN vulnerability. [.].
VPN 145
145 
A zero-day in Atlas VPN Linux Client leaks users’ IP address
Security Affairs
SEPTEMBER 6, 2023
Experts warn of an Atlas VPN zero-day flaw impacting the Linux client that can reveal the user’s IP address by visiting a website. A Reddit user with the handle ‘Educational-Map-8145’ published a proof of concept exploit for a zero-day flaw in the Linux client of Atlas VPN.
VPN 127
127 
APT hacked a US municipal government via an unpatched Fortinet VPN
Security Affairs
MAY 27, 2021
The FBI revealed that foreign hackers compromised the network of a local US municipal government by exploiting flaws in an unpatched Fortinet VPN. The Federal Bureau of Investigation (FBI) reported that an APT group had breached the network of a local US municipal government by exploiting vulnerabilities in an unpatched Fortinet VPN.
VPN 126
126 
Multiple malware used in attacks exploiting Ivanti VPN flaws
Security Affairs
FEBRUARY 1, 2024
Mandiant spotted new malware used by a China-linked threat actor UNC5221 targeting Ivanti Connect Secure VPN and Policy Secure devices. Mandiant researchers discovered new malware employed by a China-linked APT group known as UNC5221 and other threat groups targeting Ivanti Connect Secure VPN and Policy Secure devices.
VPN 117
117 
Your VPN Has Already Been Hacked
Security Boulevard
SEPTEMBER 12, 2022
The post Your VPN Has Already Been Hacked first appeared on Banyan Security. The post Your VPN Has Already Been Hacked appeared first on Security Boulevard. Then the evolution seemed to […].
VPN 52
52 
China-linked APT used Pulse Secure VPN zero-day to hack US defense contractors
Security Affairs
APRIL 20, 2021
At least one China-linked APT group exploited a new zero-day flaw in Pulse Secure VPN equipment to break into the networks of US defense contractors. The statement reveals that one of the two hacking groups was a China-linked cyber espionage group. ” reads the report published by FireEye. ” continues the report.
VPN 118
118 
Fortinet warns of a new actively exploited RCE flaw in FortiOS SSL VPN
Security Affairs
FEBRUARY 9, 2024
Fortinet warns that the recently discovered critical remote code execution flaw in FortiOS SSL VPN, tracked CVE-2024-21762, is being actively exploited. The vendor recommends to disable SSL VPN as a workaround. “Workaround : disable SSL VPN (disable webmode is NOT a valid workaround). ” reads the advisory.
VPN 113
113 
Fortinet VPN with default certificate exposes 200,000 businesses to hack
Security Affairs
SEPTEMBER 25, 2020
According to SAM Seamless Network , over 200,000 businesses are using Fortigate VPN with default settings, exposing them to the risk of a hack. In response to the spreading of Coronavirus across the world, many organizations deployed VPN solutions, including Fortigate VPN, to allow their employers to work from their homes.
VPN 111
111 
With this VPN and 90+ training courses, take cybersecurity to the next level
Tech Republic Security
JUNE 2, 2022
Get a deal on a top-rated VPN and self-paced IT certification courses that cover ethical hacking, CISSP and more. The post With this VPN and 90+ training courses, take cybersecurity to the next level appeared first on TechRepublic.
VPN 143
143 
Attacker unmasked by VPN flubs charged with Ubiquiti hack
Malwarebytes
DECEMBER 3, 2021
A former employee of Ubiquiti Networks, Nickolas Sharp, has been arrested and charged for allegedly hacking company servers, stealing gigabytes of information, and then rounding it all off with a splash of extortion. Cleverly, he used a VPN to hide his details while doing this. He probably thought he’d gotten away with it.
VPN 96
96 
Cisco addressed critical flaws in Small Business VPN routers
Security Affairs
AUGUST 4, 2022
Cisco fixes critical remote code execution vulnerability, tracked as CVE-2022-20842, impacting Small Business VPN routers. Cisco addressed a critical security vulnerability, tracked as CVE-2022-20842, impacting Small Business VPN routers. SecurityAffairs – hacking, Small Business VPN routers). ” reads the advisory.
Small Business 129
129 
5 common VPN myths busted
Malwarebytes
MARCH 11, 2021
Virtual Private Networks ( VPN s) are popular but often misunderstood. VPNs are for illegal activity. Some people think that VPNs are only useful for doing things like torrenting, accessing geo-locked content, or getting around work/school/government firewalls. I don’t need a mobile VPN. My VPN won’t let me watch Netflix.
VPN 142
142 
Can You Get Hacked While Using a VPN?
Security Boulevard
NOVEMBER 7, 2021
A VPN or a Virtual Private Network provides the solution to many security issues, but you can still get hacked while using it. For example, if you install malware or share your username and password with anyone, a VPN cannot protect you. Similarly, there are certain other technical loopholes with using a VPN that might [.].
VPN 52
52 
Russian internet watchdog Roskomnadzor bans six more VPN services
Security Affairs
DECEMBER 2, 2021
Russia’s internet watchdog, ‘Roskomnadzor’, has announced the ban of other VPN products, 15 VPN services are now illegal in Russia. Russian communications watchdog Roskomnadzor tightens the control over the Internet and blocked access to six more VPN services. SecurityAffairs – hacking, VPN services).
VPN 125
125 
Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware
Security Affairs
JANUARY 31, 2024
Threat actors are exploiting recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) VPN devices to deliver KrustyLoader. ” Sliver is a post-exploitation framework that is gaining notoriety in the hacking underground as an alternative to the Cobalt Strike framework. ” concludes the report.
VPN 101
101 
Best VPN For Hackers: Tested For Ethical Hackers & Pen-Testers
SecureBlitz
JUNE 15, 2023
In this post, I will show you the best VPN for hackers. The word “hacking” is often synonymous with criminality. Good guys” also hack systems, intentionally, to discover vulnerabilities. But not all hackers are “bad guys.” That way, they can fix the vulnerabilities before the “bad guys” take advantage of them.
VPN 77
77 
Unauthenticated Command Injection bug opens D-Link VPN routers to hack
Security Affairs
DECEMBER 8, 2020
An unauthenticated command injection vulnerability could be exploited by threat actors to compromise D-Link VPN routers. Security researchers at Digital Defense discovered three vulnerabilities in D-Link VPN routers, including command injection flaws, and an authenticated crontab injection flaw. SecurityAffairs – hacking, D-Link).
VPN 123
123 
Daixin Team group claimed the hack of North Texas Municipal Water District
Security Affairs
NOVEMBER 28, 2023
The Daixin Team group claims to have hacked the North Texas Municipal Water District (US) and threatened to leak the stolen data. The Daixin Team group gains initial access to victims through virtual private network (VPN) servers. In another compromise, the group leveraged on compromised credentials to access a legacy VPN server.
Hacking 126
126 
Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws
Security Affairs
JANUARY 16, 2024
Experts warn that recently disclosed Ivanti Connect Secure VPN and Policy Secure vulnerabilities are massively exploited in the wild. Through forensic analysis of the memory sample, Volexity was able to recreate two proof-of-concept exploits that allowed full unauthenticated command execution on the ICS VPN appliance.
VPN 92
92 
NSA, CISA release guidance on hardening remote access via VPN solutions
Security Affairs
SEPTEMBER 29, 2021
CISA and the NSA agencies have published guidance for securely using virtual private network (VPN) solutions. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released guidance for increasing the security of virtual private network (VPN) solutions.
VPN 135
135 
Pulse Secure fixes VPN zero-day used to hack high-value targets
Bleeping Computer
MAY 3, 2021
Pulse Secure has fixed a zero-day vulnerability in the Pulse Connect Secure (PCS) SSL VPN appliance that is being actively exploited to compromise the internal networks of defense firms and govt agencies. [.].
VPN 143
143 
Pulse Secure VPN zero-day used to hack defense firms, govt orgs
Bleeping Computer
APRIL 20, 2021
Pulse Secure has shared mitigation measures for a zero-day authentication bypass vulnerability in the Pulse Connect Secure (PCS) SSL VPN appliance actively exploited in attacks against worldwide organizations and focused on US Defense Industrial base (DIB) networks. [.].
VPN 145
145 
Fortinet urges customers to fix actively exploited FortiOS SSL-VPN bug
Security Affairs
DECEMBER 12, 2022
Fortinet fixed an actively exploited FortiOS SSL-VPN flaw that could allow a remote, unauthenticated attacker to execute arbitrary code on devices. “A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.”
VPN 108
108 
Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warns
Security Affairs
SEPTEMBER 8, 2023
CISA warned that nation-state actors are exploiting flaws in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus. Cybersecurity and Infrastructure Security Agency (CISA) warned that nation-state actors are exploiting security vulnerabilities in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus.
VPN 131
131 
Cisco fixes critical, high severity vulnerabilities in VPN routers
Security Affairs
AUGUST 4, 2021
Cisco fixed critical, high severity pre-auth security vulnerabilities impacting multiple Small Business VPN routers. Cisco addressed critical and high severity pre-auth security vulnerabilities that impact multiple Small Business VPN routers. SecurityAffairs – hacking, VPN routers). ” reads the advisory.
VPN 126
126 
South Korea's Nuclear Research agency breached using VPN flaw
Bleeping Computer
JUNE 19, 2021
South Korea's 'Korea Atomic Energy Research Institute' disclosed yesterday that their internal networks were hacked last month by North Korean threat actors using a VPN vulnerability. [.].
VPN 140
140 
North Korean cyber attacks income and free VPN data breach
CyberSecurity Insiders
JUNE 6, 2023
In 2019, the United Nations released an estimate confirming that the North Korean regime, led by Kim Jong Un, had accumulated a staggering $2 billion by launching hacks on cryptocurrency firms and internationally recognized banks. The post North Korean cyber attacks income and free VPN data breach appeared first on Cybersecurity Insiders.
Data breaches 107
107 
VPN Hacks Are a Slow-Motion Disaster
WIRED Threat Level
APRIL 25, 2021
Recent spying attacks against Pulse Secure VPN are just the latest example of a long-simmering cybersecurity meltdown.
VPN 104
104 
Zyxel firewall and VPN devices affected by critical flaws
Security Affairs
MAY 25, 2023
Zyxel fixed two critical flaws in multiple firewall and VPN products that can lead to remote code execution or cause a DoS condition. Zyxel addressed two critical buffer overflow vulnerabilities, tracked as CVE-2023-33009 and CVE-2023-33010 , that affect several of its firewall and VPN products. Patch 2 VPN ZLD V4.30
Firewall 98
98 
9 Reasons Why Everyone Should Use a VPN
CyberSecurity Insiders
AUGUST 6, 2021
Most VPNs are user-friendly and are created with well-detailed guides which are navigable by nearly anyone, even a technology illiterate individual. Therefore, aside from ensuring your network is secured, a VPN is usually very easy to maneuver around, and unlike what most people assume, VPNs are not meant for tech-savvy individuals alone.
VPN 142
142 
Hacker leaks passwords for 900+ Pulse Secure VPN enterprise servers
Security Affairs
AUGUST 5, 2020
ZDNet reported in exclusive that a list of passwords for 900+ enterprise VPN servers has been shared on a Russian-speaking hacker forum. ZDNet has reported in exclusive that a list of plaintext usernames and passwords for 900 Pulse Secure VPN enterprise servers, along with IP addresses, has been shared on a Russian-speaking hacker forum.
VPN 140
140 
China-linked APT groups targets orgs via Pulse Secure VPN devices
Security Affairs
MAY 28, 2021
Researchers from FireEye warn that China-linked APT groups continue to target Pulse Secure VPN devices to compromise networks. Cybersecurity researchers from FireEye warn once again that Chinese APT groups continue to target Pulse Secure VPN devices to penetrate target networks and deliver malicious web shells to steal sensitive information.
VPN 134
134 
Bulletproof VPN services took down in a global police operation
Security Affairs
DECEMBER 22, 2020
A joint operation conducted by law European enforcement agencies resulted in the seizure of the infrastructure of three bulletproof VPN services. ” The three VPN bulletproof services were hosted at insorg.org , safe-inet.com , and safe-inet.net, their home page currently displays a law enforcement banner. day to $190/year.
VPN 126
126 
VPN Use Cases: Discover The Top 7 Cool Things You Can Do With A VPN
SecureBlitz
FEBRUARY 2, 2023
Looking for cool things to do with a VPN? Or do you want some new and exciting ways to make the most of your VPN? From streaming your favorite shows in a different country […] The post VPN Use Cases: Discover The Top 7 Cool Things You Can Do With A VPN appeared first on SecureBlitz Cybersecurity.
VPN 79
79 
Cisco warns of XSS flaw in end-of-life small business routers
Security Affairs
APRIL 6, 2024
.” The flaw impacts all software releases for the following Cisco RV Series Small Business Routers: RV016 Multi-WAN VPN Routers RV042 Dual WAN VPN Routers RV042G Dual Gigabit WAN VPN Routers RV082 Dual WAN VPN Routers RV320 Dual Gigabit WAN VPN Routers RV325 Dual Gigabit WAN VPN Routers To mitigate this vulnerability on Cisco Small Business RV320 (..)
Small Business 139
139 
North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute
The Hacker News
JUNE 19, 2021
The intrusion is said to have taken place on May 14 through a vulnerability in an unnamed virtual private network (VPN) vendor and involved a total of 13 IP addresses, one of which — "27.102.114[.]89
VPN 104
104 
MITRE says state hackers breached its network via Ivanti zero-days
Bleeping Computer
APRIL 19, 2024
The MITRE Corporation says a state-backed hacking group breached its systems in January 2024 by chaining two Ivanti VPN zero-days. [.]
VPN 145
145 
Let's personalize your content