Tag: vpn vulnerability
6 articles
Ransomware Groups Exploit VPN Vulnerability
Ransomware groups like Qilin and Settra are sneaking into organizations by exploiting a VPN vulnerability, disguising their malicious activity as legitimate remote work. This allows them to steal credentials, move laterally, and deploy ransomware undetected until it's too late.
Japan's Digital Agency Breach Exposes 246,000 Personnel Records
A shocking security breach at Japan's Digital Agency has exposed a staggering 246,000 personnel records after a third-party hacker exploited a vulnerability in a network-connected device to gain unauthorized access to the system. The breach was only discovered on July 9, after a large-scale file access was detected from a staff member's account on June 25.
NCSC Warns Fortinet Customers of Credential Theft Fallout
A massive database of 75,000 stolen credentials, including usernames, email addresses, and passwords, has been discovered, putting organisations like Oracle, Spotify, and AT&T at risk. The leak, dubbed "FortiBleed," affects customers in 194 countries and over 21,000 domains, with nearly half of all internet-accessible Fortinet firewalls potentially exposed.
CISA Mandates Patching of Exploited Check Point VPN Bug
A critical vulnerability in Check Point VPNs, known as CVE-2026-50751, has been exploited in dozens of organizations worldwide, with one incident linked to Qilin ransomware. This bug allows hackers to bypass authentication and establish remote access, putting targeted organizations at risk.
Check Point VPN Flaw Exposed, Bypasses Passwords in IKEv1 Setups
A critical flaw in Check Point VPN setups has been exposed, allowing attackers to bypass passwords and establish a VPN session without proper authentication in certain configurations. This vulnerability, tracked as CVE-2026-50751, impacts Remote Access VPN and Mobile Access deployments using the outdated IKEv1 protocol.
Banks' Annual Testing Model Leaves 345 Days of Unvalidated Exposure
Imagine having 345 days of potential vulnerability, with hackers free to exploit your defenses while you wait for your annual security test. That's the harsh reality of the traditional annual testing model, which leaves your business exposed for nearly 11 months of the year.