Penetration Testing

FEBRUARY 9, 2024

Recently, a critical flaw, nestled within the SSL-VPN feature of SonicWall’s SonicOS, has been brought to light, exposing a gap wide enough for remote attackers to slip through unnoticed.

Authentication 90

Authentication Penetration Testing VPN 90

Penetration Testing

DECEMBER 15, 2024

X41 D-Sec GmbH, a leading cybersecurity firm, has completed a white-box penetration test of the Mullvad VPN application, revealing several vulnerabilities, including one rated as “critical” and two rated as... The post CVE-2024-55884 (CVSS 9.0): Critical Vulnerability Found in Mullvad VPN appeared first on Cybersecurity News. (..)

VPN 58

VPN Penetration Testing Cybersecurity 58

Penetration Testing

JANUARY 19, 2024

Recently, the cyber intelligence firm Volexity has detected many malicious exploitation activities using critical vulnerabilities in Ivanti Connect Secure VPN appliances.

Penetration Testing 88

Penetration Testing VPN Malware 88

Penetration Testing

JULY 18, 2024

This vulnerability, identified as CVE-2024-40764 with a CVSS score of 7.5, could... The post SonicWall Patches Unauthenticated DoS Flaw (CVE-2024-40764) in SonicOS IPSec VPN appeared first on Cybersecurity News.

VPN 68

VPN Cybersecurity 68

Penetration Testing

JULY 17, 2024

A new study presented at the Privacy Enhancing Technologies Symposium (PETS) 2024 has revealed a vulnerability in popular VPN protocols like OpenVPN and WireGuard.

VPN 84

VPN Technology Cybersecurity 84

Penetration Testing

MAY 29, 2024

Security researchers at watchTowr Labs have detailed a zero-day vulnerability (CVE-2024-24919) in Check Point’s Remote Access VPN appliances, which is actively being exploited by malicious actors.

VPN 57

VPN Penetration Testing 57

Penetration Testing

JULY 21, 2024

Amazon Web Services (AWS) has issued a security bulletin regarding two vulnerabilities discovered in its Client VPN service.

VPN 58

VPN Cybersecurity 58

SecureList

AUGUST 21, 2024

Q2 2024 was eventful in terms of new interesting vulnerabilities and exploitation techniques for applications and operating systems. Attacks through vulnerable drivers have become prevalent as a general means of privilege escalation in the operating system.

Software 105

Software Penetration Testing Risk VPN 105

Penetration Testing

AUGUST 12, 2024

Akamai researchers have exposed a series of vulnerabilities and techniques that could allow threat actors to further escalate their attacks after compromising a Virtual Private Network (VPN) server.

VPN 92

VPN Cybersecurity 92

Penetration Testing

OCTOBER 30, 2024

Security researchers have uncovered a critical remote code execution (RCE) vulnerability in DrayTek Vigor2960 routers, a popular choice for businesses requiring a robust VPN solution.

VPN 80

VPN Cybersecurity 80

Penetration Testing

OCTOBER 10, 2024

SonicWall has released security updates to address multiple vulnerabilities affecting its SMA 1000 series SSL-VPN appliances and the associated Connect Tunnel Windows client.

VPN 87

VPN Cybersecurity 87

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. 30% data breaches and +23% ransomware for the first two months of 2024. Read on for more details on these threats or jump down to see the linked vendor reports. globally, +19.8%

Cybersecurity 103

Cybersecurity DDOS Penetration Testing Passwords 103

Penetration Testing

OCTOBER 23, 2024

Cisco has disclosed an actively exploited vulnerability (CVE-2024-20481) in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that could allow attackers to launch denial-of-service (DoS) attacks against... The post Active Exploits Target Cisco ASA and FTD VPNs: Urgent Update Needed (CVE-2024-20481) appeared (..)

Software 95

Software Cybersecurity VPN 95

Penetration Testing

JULY 19, 2024

Cisco has issued a security advisory warning users of a vulnerability in their RV340 and RV345 Dual WAN Gigabit VPN routers.

VPN 61

VPN Authentication Cybersecurity 61

Penetration Testing

AUGUST 28, 2024

Cisco... The post BlackByte Ransomware Group Exploits VMware CVE-2024-37085 Flaw, Shifts Tactics appeared first on Cybersecurity News. The BlackByte ransomware group has re-emerged with an unsettling surge in activity and a refined set of tactics, techniques, and procedures (TTPs) that pose a heightened risk to organizations.

Ransomware 58

Ransomware Risk Cybersecurity VPN 58

Penetration Testing

OCTOBER 6, 2024

In a recent security advisory, Cisco revealed multiple vulnerabilities impacting its Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers, which could potentially expose businesses to serious... The post Privilege Escalation and Remote Code Execution Threaten Cisco Routers: No Updates Available appeared first on (..)

Small Business 78

Small Business VPN Cybersecurity 78

Penetration Testing

JULY 9, 2024

OpenVPN, a leading provider of virtual private network (VPN) solutions, has refuted claims of zero-day vulnerabilities in its OpenVPN2 software, alleged to allow an attack named OVPNX.

VPN 66

VPN Software Cybersecurity 66

Penetration Testing

DECEMBER 18, 2024

Fortinet, a leading cybersecurity vendor, has issued urgent advisories regarding several critical vulnerabilities affecting its popular products, including FortiClient VPN, FortiManager, and FortiWLM.

VPN 61

VPN Passwords Cybersecurity 61

Penetration Testing

JULY 22, 2024

WARP, a free VPN service designed to optimize user traffic, is being leveraged by attackers to mask... The post Cloudflare WARP Abused to Hijack Cloud Services, Cado Security Report Reveals appeared first on Cybersecurity News.

VPN 63

VPN Internet Internet Cybersecurity 63

Penetration Testing

DECEMBER 5, 2024

SonicWall has issued a security advisory regarding several vulnerabilities impacting its SMA 100 series SSL-VPN products.

VPN 61

VPN Cybersecurity 61

eSecurity Planet

MAY 25, 2022

Penetration testing and red teamers are critical for remaining vigilant in an ever-changing threat environment and catching the vulnerabilities otherwise missed. While initial standards are expected by 2024, a full mitigation architecture for federal agencies isn’t expected until 2035. Uses of Encryption.

Encryption 135

Encryption Computers and Electronics Password Management Passwords 135

Penetration Testing

OCTOBER 24, 2024

Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about two actively exploited vulnerabilities affecting Cisco networking devices and the popular Roundcube webmail software.

Software 61

Software Cybersecurity VPN 61

Penetration Testing

SEPTEMBER 11, 2024

Cisco Systems has released a series of urgent security advisories, revealing a total of nine vulnerabilities affecting various products, including Cisco IOS XR Software, Crosswork Network Services Orchestrator (NSO), Optical... The post Cisco Issues Security Advisories: Critical Vulnerabilities Impact Multiple Products appeared first on (..)

Software 46

Software Cybersecurity VPN 46