Penetration Testing

JANUARY 28, 2024

Recently, QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based implant found in Ivanti Connect Secure (ICS) VPN compromised appliances (CVE-2023-21887 and CVE-2023-46805).

VPN 107

VPN Penetration Testing Cybersecurity Malware 107

Penetration Testing

DECEMBER 27, 2023

The recent discovery of... The post The Urgent Need to Patch Buffalo’s VR-S1000 VPN Router appeared first on Penetration Testing. However, with this reliance comes a heightened vulnerability to cyber threats.

VPN 102

VPN Penetration Testing Cyber threats Internet 102

Penetration Testing

JANUARY 24, 2024

The Danish Centre for Cyber Security (CFCS) is warning of increased ransomware activity, exploiting CVE-2023-20269, a vulnerability that affects the VPN feature in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD)... The post Denmark’s CFCS Raises Alarm on Ransomware Exploiting Cisco VPN Flaw CVE-2023-20269 (..)

VPN 96

VPN Penetration Testing Ransomware 96

Penetration Testing

NOVEMBER 15, 2024

Cybersecurity firm Volexity has uncovered a zero-day vulnerability in Fortinet’s Windows VPN client, FortiClient, being exploited by the BrazenBamboo Advanced Persistent Threat (APT) group.

VPN 131

VPN Cybersecurity Malware 131

Penetration Testing

FEBRUARY 8, 2024

The advisory centered around a... The post CVE-2024-21762 (CVSS 9.6): FortiOS SSL-VPN Zero-Day Pre-Auth RCE Flaw appeared first on Penetration Testing.

VPN 106

VPN Penetration Testing Cyber threats Network Security 106

Penetration Testing

MAY 2, 2024

Microsoft’s Senior Security Researcher Vladimir Tokarev will detail a series of critical zero-day vulnerabilities in OpenVPN, the world’s leading VPN solution, used by millions of endpoints globally at the upcoming Black Hat USA 2024... The post Microsoft Researcher to Unveil 4 OpenVPN Zero-Day Vulnerabilities at Black Hat USA (..)

Penetration Testing 145

Penetration Testing VPN 145

Penetration Testing

MARCH 19, 2024

Proof-of-concept (PoC) code is now available for a critical severity vulnerability (CVE-2024-21762) in FortiOS SSL VPN. out of 10, this flaw opens the door to remote code execution... The post PoC Releases for 0-day CVE-2024-21762 FortiGate SSLVPN Flaw, Over 133K Remain Vulnerable appeared first on Penetration Testing.

Penetration Testing 145

Penetration Testing VPN 145

Penetration Testing

JANUARY 15, 2025

Cybersecurity expert Kevin Beaumont has reported that over 15,000 FortiGate firewall configurations, including VPN credentials, have been publicly The post 15,000 FortiGate Firewalls Exposed: Massive Leak Includes VPN Credentials appeared first on Cybersecurity News.

Firewall 118

Firewall VPN Cybersecurity 118

Penetration Testing

AUGUST 11, 2024

This surge in attacks... The post North Korean Hackers Exploit VPN Vulnerabilities to Breach Networks appeared first on Cybersecurity News.

VPN 122

VPN Engineering Government Cybersecurity 122

Krebs on Security

OCTOBER 8, 2020

There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” ” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in.

Cybercrime 352

Cybercrime Malware VPN Ransomware 352

Penetration Testing

FEBRUARY 11, 2024

A recently discovered security bug in ExpressVPN’s Windows software, tracked as CVE-2024-25728, has forced the popular VPN provider to temporarily disable its ‘split tunneling‘ feature.

Penetration Testing 113

Penetration Testing VPN Software 113

Penetration Testing

NOVEMBER 12, 2023

OpenVPN Access Server, a popular open-source VPN solution, has been patched to address two vulnerabilities that could allow attackers to gain unauthorized access to sensitive information.

Penetration Testing 111

Penetration Testing VPN 111

Penetration Testing

APRIL 9, 2025

SonicWall has issued a security advisory disclosing three newly identified vulnerabilities in its NetExtender Windows client, a popular VPN tool used by organizations for secure remote access to internal networks. SonicWall outlined three distinct vulnerabilities affecting NetExtender for Windows versions 10.3.1

VPN 90

VPN Cybersecurity 90

Penetration Testing

DECEMBER 15, 2024

X41 D-Sec GmbH, a leading cybersecurity firm, has completed a white-box penetration test of the Mullvad VPN application, revealing several vulnerabilities, including one rated as “critical” and two rated as... The post CVE-2024-55884 (CVSS 9.0): Critical Vulnerability Found in Mullvad VPN appeared first on Cybersecurity News. (..)

VPN 60

VPN Penetration Testing Cybersecurity 60

Penetration Testing

FEBRUARY 9, 2024

Recently, a critical flaw, nestled within the SSL-VPN feature of SonicWall’s SonicOS, has been brought to light, exposing a gap wide enough for remote attackers to slip through unnoticed.

Authentication 93

Authentication Penetration Testing VPN 93

Penetration Testing

MAY 29, 2024

Security researchers at watchTowr Labs have detailed a zero-day vulnerability (CVE-2024-24919) in Check Point’s Remote Access VPN appliances, which is actively being exploited by malicious actors.

VPN 60

VPN Penetration Testing 60

Penetration Testing

AUGUST 12, 2024

Akamai researchers have exposed a series of vulnerabilities and techniques that could allow threat actors to further escalate their attacks after compromising a Virtual Private Network (VPN) server.

VPN 93

VPN Cybersecurity 93

Penetration Testing

JULY 17, 2024

A new study presented at the Privacy Enhancing Technologies Symposium (PETS) 2024 has revealed a vulnerability in popular VPN protocols like OpenVPN and WireGuard.

VPN 87

VPN Technology Cybersecurity 87

Penetration Testing

JANUARY 19, 2024

Recently, the cyber intelligence firm Volexity has detected many malicious exploitation activities using critical vulnerabilities in Ivanti Connect Secure VPN appliances.

Penetration Testing 91

Penetration Testing VPN Malware 91

Penetration Testing

OCTOBER 10, 2024

SonicWall has released security updates to address multiple vulnerabilities affecting its SMA 1000 series SSL-VPN appliances and the associated Connect Tunnel Windows client.

VPN 89

VPN Cybersecurity 89

Penetration Testing

MARCH 11, 2025

Technology companies typically employ differentiated pricing strategies across various markets, taking into account factors such as purchasing power The post VPN No More: Xbox Targets Gamers Buying Games from Cheaper Regions appeared first on Cybersecurity News.

VPN 86

VPN Marketing Technology Accountability 86

Penetration Testing

APRIL 4, 2024

In yet another instance highlighting the dangers of malvertising, the popular VPN service NordVPN has become the latest target of cybercriminals.

Penetration Testing 89

Penetration Testing Malware VPN 89

Penetration Testing

NOVEMBER 23, 2023

strongSwan, a widely used open-source VPN software, has been found to harbor a critical security vulnerability that could allow remote attackers to execute arbitrary code on affected systems.

Penetration Testing 84

Penetration Testing VPN Software 84

Penetration Testing

JANUARY 3, 2025

In 2022, India began enforcing a new VPN policy mandated by the Indian Computer Emergency Response Team (CERT-In). The post India’s VPN Crackdown: Popular Apps Vanish from App Stores appeared first on Cybersecurity News.

VPN 69

VPN Cybersecurity Technology 69

Penetration Testing

OCTOBER 1, 2024

However, these networks often lack robust security measures, making them prime... The post Microsoft Defender Introduces VPN to Secure Public Wi-Fi Connections appeared first on Cybersecurity News. In an age where connectivity is paramount, public Wi-Fi networks have become indispensable for staying connected on the go.

VPN 76

VPN Cybersecurity 76

Google Security

OCTOBER 11, 2022

The certification not only requires chip hardware to resist invasive penetration testing, but also mandates audits of the chip design and manufacturing process itself. This is where a Virtual Private Network (VPN) comes in. Typically, if you want a VPN on your phone, you need to get one from a third party.

Mobile 136

Mobile VPN Penetration Testing Encryption 136

Penetration Testing

JANUARY 6, 2025

Popular VPN client app, OpenVPN Connect, patched a critical security flaw that could have exposed users’ private keys The post CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys appeared first on Cybersecurity News.

VPN 145

VPN Cybersecurity 145

Hacker's King

SEPTEMBER 2, 2024

Whether you are conducting a black-box penetration test or assessing your organization's security posture, SpiderFoot offers a comprehensive solution for both offensive and defensive operations. You may read more about : Guide to Android Penetration Testing for Beginners 4.

Penetration Testing 52

Penetration Testing DNS Phishing Engineering 52

Penetration Testing

JULY 18, 2024

could... The post SonicWall Patches Unauthenticated DoS Flaw (CVE-2024-40764) in SonicOS IPSec VPN appeared first on Cybersecurity News. This vulnerability, identified as CVE-2024-40764 with a CVSS score of 7.5,

VPN 72

VPN Cybersecurity 72

Webroot

OCTOBER 22, 2021

The most popular options include virtual private network (VPN) or remote desktop protocol (RDP). VPN works by initiating a secure connection over the internet through data encryption. One downside of using a VPN connection involves vulnerability. One downside of using a VPN connection involves vulnerability.

VPN 124

VPN Penetration Testing Education Security Awareness 124

Penetration Testing

FEBRUARY 2, 2025

In a move that’s sure to raise eyebrows and questions about its commitment to user privacy, Microsoft has The post Microsoft to Kill its 365 VPN: What You Need to Know appeared first on Cybersecurity News.

VPN 63

VPN Cybersecurity Technology 63

Penetration Testing

JANUARY 8, 2025

The open-source VPN software OpenVPN has patched three significant vulnerabilities in OpenVPN 2.6.11, released on June 21, 2024. The post CVE-2024-5594 (CVSS 9.1): Critical Vulnerability in OpenVPN Enables Code Execution appeared first on Cybersecurity News.

VPN 137

VPN Software Cybersecurity 137

Penetration Testing

APRIL 14, 2025

A recent report by TeamT5 has uncovered a widespread cyber espionage campaign targeting Ivanti Connect Secure VPN appliances. The post China-Nexus APT Exploits Ivanti Connect Secure VPN in Global Cyber Espionage Campaign appeared first on Daily CyberSecurity.

VPN 59

VPN Cybersecurity 59

Penetration Testing

JULY 21, 2024

Amazon Web Services (AWS) has issued a security bulletin regarding two vulnerabilities discovered in its Client VPN service.

VPN 60

VPN Cybersecurity 60

Penetration Testing

DECEMBER 21, 2023

First gaining attention in early 2023, Akira quickly became notorious for its targeted attacks on small to medium-sized businesses... The post Akira Goes Stealthy: Ransomware Group Prioritizes Data Theft for Extortion appeared first on Penetration Testing.

Penetration Testing 91

Penetration Testing Ransomware Cybersecurity VPN 91

Security Affairs

APRIL 8, 2022

When you access the internet through a VPN, your data is encrypted and routed through a secure tunnel. VPNs are especially important if you use public Wi-Fi, as these networks are often unsecured and easy for hackers to exploit. As with any software, it is vitally important to update your VPN with any new patches that become available.

Cybersecurity 130

Cybersecurity Passwords Penetration Testing Encryption 130

Penetration Testing

APRIL 28, 2025

Toronto, Canada, 28th April 2025, CyberNewsWire The post Court Dismisses Criminal Charges Against VPN Executive, Affirms No-Log Policy appeared first on Daily CyberSecurity.

VPN 52

VPN Cybersecurity 52