2024 and VPN - Cyber Security Informer

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Security Affairs

NOVEMBER 19, 2024

Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware. ” reads the advisory.

VPN

VPN Malware Spyware Passwords

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

MARCH 17, 2025

Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. How AI and automation are amplifying the scale and sophistication of VPN attacks.

VPN

VPN Authentication Ransomware Risk

Surfshark vs Norton Secure VPN (2024): Which VPN Is Better?

Tech Republic Security

JUNE 20, 2024

Which VPN is better, Norton Secure VPN or Surfshark? Use our guide to compare pricing, features and more.

VPN

Webinars

How to Avoid Pitfalls In Automation: Keep Humans In the Loop

MORE WEBINARS

Best of 2024: If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

Security Boulevard

JANUARY 3, 2025

Firewalls and VPN appliances are critical gateways. The post Best of 2024: If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door appeared first on Security Boulevard. Like all on-prem systems, a vulnerability can lead to a compromise that is used to open the door for attackers.

Firewall

Firewall VPN Security Awareness Cybersecurity

Avast SecureLine VPN vs NordVPN (2024): Which VPN Is Better?

Tech Republic Security

JULY 17, 2024

Which VPN is better, Avast SecureLine VPN or NordVPN? Use our guide to compare pricing, features, and more.

VPN

AVG Secure VPN vs Surfshark (2024): Which VPN Is Better?

Tech Republic Security

JULY 1, 2024

Is AVG Secure VPN worth it? Find out which VPN is better with our guide. Is Surfshark better than AVG?

VPN

Urban VPN Review (2024): Is it a Safe & Reliable VPN to Use?

Tech Republic Security

OCTOBER 16, 2024

With its questionable privacy policy, slow VPN performance, and lack of independent audits, Urban VPN fails to offer a secure and quality VPN experience.

VPN

Bitdefender VPN vs NordVPN (2024): Which VPN Is the Best?

Tech Republic Security

JUNE 24, 2024

Which is better, Bitdefender VPN or NordVPN? Use our guide to help you compare pricing, features and more.

VPN

The Top 6 Urban VPN Alternatives for 2024

Tech Republic Security

AUGUST 5, 2024

If you’re on the hunt for Urban VPN alternatives, check out our in-depth analysis of Proton VPN, TunnelBear and other VPN providers.

VPN

CyberGhost vs ExpressVPN (2024): Which VPN Is Better?

Tech Republic Security

AUGUST 19, 2024

While CyberGhost VPN presents an impressive amount of servers, ExpressVPN’s consistent VPN speeds and strong third-party audits give it the edge.

VPN

NordVPN vs Proton VPN (2024): Which VPN Should You Choose?

Tech Republic Security

AUGUST 29, 2024

While Proton VPN’s strong focus on privacy is enticing, NordVPN’s fast-performing and all-around VPN service is the better overall package between the two.

VPN

IPVanish vs ExpressVPN (2024): Which VPN Is Better?

Tech Republic Security

JULY 18, 2024

Which VPN is better, IPVanish or ExpressVPN? Use our guide to compare pricing, features and more.

VPN

Surfshark vs CyberGhost (2024): Which VPN Is Better?

Tech Republic Security

JULY 22, 2024

Which VPN is better, Surfshark or CyberGhost? Compare these VPNs with our guide and find out which one is best for you.

VPN

Norton Secure VPN vs NordVPN (2024): Which VPN Is the Best?

Tech Republic Security

AUGUST 12, 2024

Compare Norton Secure VPN and NordVPN based on speed, server options, privacy and support to learn which is better.

VPN

IPVanish vs NordVPN (2024): Which VPN Is Better?

Tech Republic Security

JULY 30, 2024

NordVPN’s useful security features, fast speeds and larger server network gives it a significant advantage over IPVanish’s decent VPN experience.

VPN

Mullvad vs NordVPN (2024): Which VPN Should You Choose?

Tech Republic Security

AUGUST 6, 2024

While Mullvad VPN offers strong privacy and transparency features, NordVPN’s feature-packed service and robust server fleet give it an advantage.

VPN

U.S. CISA adds Veeam Backup and Replication flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

OCTOBER 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added the Veeam Backup and Replication flaw CVE-2024-40711 (CVSS score of 9.8) This week, Sophos researchers warned that ransomware operators are exploiting the critical vulnerability CVE-2024-40711 in Veeam Backup & Replication to create rogue accounts and deploy malware.

Backups

Backups VPN Ransomware Authentication

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

OCTOBER 25, 2024

The vulnerability CVE-2024-20481 (CVSS score of 5.8) is a Denial of Service (DoS) issue that impacts the Remote Access VPN (RAVPN) service of ASA and FTD. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. This vulnerability is due to resource exhaustion.

VPN

VPN Firewall Technology Passwords

SonicWall warns of an exploitable SonicOS vulnerability

Security Affairs

JANUARY 8, 2025

.” SonicWall is urging customers to upgrade the SonicOS firmware of their firewalls to patch an authentication bypass vulnerability tracked as CVE-2024-53704 (CVSS score of 8.2). The vulnerability resides in SSL VPN and SSH management and according to the vendor is “susceptible to actual exploitation.”

Firewall

Firewall Firmware VPN Authentication

Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warns

Security Affairs

APRIL 12, 2025

The cybersecurity firm revealed that attackers exploited known FortiGate flaws like CVE-2022-42475 , CVE-2023-27997 , and CVE-2024-21762 to gain persistent read-only access via a symlink in SSL-VPN language folders. ” Fortinet pointed out that only devices with SSL-VPN enabled are impacted. . FortiOS 7.4,

VPN

VPN Engineering Hacking Cybersecurity

Major VPN Flaw Exposed: “TunnelVision” (CVE-2024-3661) Threatens Security on Public Networks

Penetration Testing

MAY 6, 2024

The very backbone of Virtual Private Networks (VPNs), praised for their ability to secure online activities, is under scrutiny following a breakthrough discovery by Dani Cronce and Lizzie Moratti from Leviathan Security Group.

VPN

VPN Penetration Testing

CyberGhost vs NordVPN (2024): Which VPN Should You Choose?

Tech Republic Security

AUGUST 26, 2024

While CyberGhost VPN’s optimized servers bring a lot of value, NordVPN’s more consistent speed performance and extensive feature inclusions give it the slight edge.

VPN

Active Exploits Target Cisco ASA and FTD VPNs: Urgent Update Needed (CVE-2024-20481)

Penetration Testing

OCTOBER 23, 2024

Cisco has disclosed an actively exploited vulnerability (CVE-2024-20481) in its Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that could allow attackers to launch denial-of-service (DoS) attacks against... The post Active Exploits Target Cisco ASA and FTD VPNs: Urgent Update Needed (CVE-2024-20481) appeared (..)

Software

Software Cybersecurity VPN

Surfshark vs IPVanish (2024): Which VPN Should You Choose?

Tech Republic Security

JULY 2, 2024

Which is better, Surfshark or IPVanish? Use our guide to help you compare pricing, features and more.

VPN

Private Internet Access (PIA) vs ExpressVPN (2024): Which VPN Is Better?

Tech Republic Security

AUGUST 15, 2024

ExpressVPN’s overall polish, fast performance and wider server network give it a slight edge over PIA VPN’s feature-rich and affordable package.

VPN

VPN Internet Internet

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Security Affairs

JANUARY 14, 2025

The campaign likely began in November 2024, the campaign unfolded in four phases: vulnerability scanning (Nov 1623, 2024), reconnaissance (Nov 2227), SSL VPN setup (Dec 47), and lateral movement (Dec 1627). and 7.0.16, which were released on February 2024 and October 2024 respectively. .”

Firewall

Firewall VPN Accountability Firmware

Apple Removes VPN Apps from Russian App Store Amid Government Pressure

The Hacker News

JULY 7, 2024

Apple removed a number of virtual private network (VPN) apps in Russia from its App Store on July 4, 2024, following a request by Russia's state communications watchdog Roskomnadzor, Russian news media reported. It's worth noting that NordVPN previously shut

VPN

VPN Government Mobile Media

CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys

Penetration Testing

JANUARY 6, 2025

Popular VPN client app, OpenVPN Connect, patched a critical security flaw that could have exposed users’ private keys The post CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys appeared first on Cybersecurity News.

VPN

VPN Cybersecurity

6 Best VPNs for Australia in 2024

Tech Republic Security

JUNE 12, 2024

What's the best VPN to use in Australia? Discover the pricing, features, pros and cons of our recommended VPNs for Australia.

VPN

Check Point released hotfix for actively exploited VPN zero-day

Security Affairs

MAY 29, 2024

Check Point released hotfixes for a VPN zero-day vulnerability, tracked as CVE-2024-24919, which is actively exploited in attacks in the wild. Check Point released hotfixes to address a VPN zero-day vulnerability, tracked as CVE-2024-24919 , which is actively being exploited in attacks in the wild.

VPN

VPN Passwords Authentication Accountability

6 Best Anonymous (No-Log) VPNs for 2024

Tech Republic Security

JANUARY 11, 2024

Looking for the best anonymous (no-log) VPN? Check out our comprehensive list to find the top VPN services that prioritize anonymity and security.

VPN

U.S. CISA adds Array Networks AG and vxAG ArrayOS flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

NOVEMBER 26, 2024

Attackers can exploit the SSL VPN gateway by accessing the filesystem via an HTTP header flags attribute and a vulnerable URL without authentication. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication.

VPN

VPN Authentication Hacking Cybersecurity

Microsoft says April Windows updates break VPN connections

Bleeping Computer

MAY 1, 2024

Microsoft says the April 2024 Windows security updates break VPN connections on Windows 11, Windows 10, and Windows Server systems. [.]

VPN

Surfshark vs NordVPN (2024): Which VPN Should You Choose?

Tech Republic Security

SEPTEMBER 9, 2024

Compare Surfshark and NordVPN to determine which one is better. Explore their features, performance and pricing to make an informed decision.

VPN

PureVPN vs NordVPN (2024): Which VPN Should You Choose?

Tech Republic Security

JULY 16, 2024

While PureVPN’s more affordable starting plan may be enticing, NordVPN’s stronger security and broader server fleet makes the higher price tag worth the money.

VPN

6 Best VPNs for the UK in 2024

Tech Republic Security

JUNE 4, 2024

What are the top VPNs in the U.K.? VPNs users should be looking at and the key features they should consider during VPN selection. Here are the best U.K.

VPN

The Top 7 NordVPN Alternatives for 2024

Tech Republic Security

AUGUST 1, 2024

If you’re looking for the best NordVPN alternatives today, Surfshark VPN, Proton VPN and ExpressVPN are among a handful of quality VPNs you should check out.

VPN

Feds Charge Five Men in ‘Scattered Spider’ Roundup

Krebs on Security

NOVEMBER 21, 2024

Some SMS phishing messages told employees their VPN credentials were expiring and needed to be changed; other phishing messages advised employees about changes to their upcoming work schedule. In January 2024, KrebsOnSecurity broke the news that Urban had been arrested in Florida in connection with multiple SIM-swapping attacks.

Identity Theft

Identity Theft Phishing Cryptocurrency Accountability

NailaoLocker ransomware targets EU healthcare-related entities

Security Affairs

FEBRUARY 20, 2025

NailaoLocker ransomware is a new threat that targeted European healthcare organizations from June to October 2024. The Orange Cyberdefense CERT investigated four attackers with a similar initial access vector consisting of thecompromise of a Check Point VPN appliance. ” reads the advisory Check Point Security Gateways.

Healthcare

Healthcare Ransomware VPN Malware

Best VPN For 2024: Tested By Privacy Experts

SecureBlitz

JANUARY 24, 2024

Want the best VPN for 2024? With the ever-increasing issue of online privacy and security, a reliable VPN has become a must-have tool for internet users. Look no further, as we have got you covered in this post.

VPN

VPN Internet Internet Cybersecurity

CVE-2024-24919: Active Exploitation of Check Point Remote Access VPN Vulnerability

Penetration Testing

MAY 29, 2024

In a recent advisory, Check Point has alerted its users to an active campaign targeting Remote Access VPN devices.

VPN

VPN Penetration Testing

6 Best VPNs for Canada in 2024 (Free & Paid VPNs)

Tech Republic Security

MAY 28, 2024

What is the best VPN provider in Canada? Use our guide to compare the pricing and features of our recommended VPNs for Canada.

VPN

CVE-2024-5594 (CVSS 9.1): Critical Vulnerability in OpenVPN Enables Code Execution

Penetration Testing

JANUARY 8, 2025

The open-source VPN software OpenVPN has patched three significant vulnerabilities in OpenVPN 2.6.11, released on June 21, 2024. The post CVE-2024-5594 (CVSS 9.1): Critical Vulnerability in OpenVPN Enables Code Execution appeared first on Cybersecurity News.

VPN

VPN Software Cybersecurity

HideMy.name VPN Review 2024: Is It Worth It?

SecureBlitz

JANUARY 29, 2024

Read on for the HideMy.name VPN Review. Looking for a reliable VPN to use? However, reading this means you have your eyes set on HideMy.name VPN. Nevertheless, being […] The post HideMy.name VPN Review 2024: Is It Worth It? That can be difficult since many options are available online.

VPN

VPN Cybersecurity

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Webinars

Trending Sources

Surfshark vs Norton Secure VPN (2024): Which VPN Is Better?

Webinars

Best of 2024: If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door

Avast SecureLine VPN vs NordVPN (2024): Which VPN Is Better?

AVG Secure VPN vs Surfshark (2024): Which VPN Is Better?

Urban VPN Review (2024): Is it a Safe & Reliable VPN to Use?

Bitdefender VPN vs NordVPN (2024): Which VPN Is the Best?

The Top 6 Urban VPN Alternatives for 2024

CyberGhost vs ExpressVPN (2024): Which VPN Is Better?

NordVPN vs Proton VPN (2024): Which VPN Should You Choose?

IPVanish vs ExpressVPN (2024): Which VPN Is Better?

Surfshark vs CyberGhost (2024): Which VPN Is Better?

Norton Secure VPN vs NordVPN (2024): Which VPN Is the Best?

IPVanish vs NordVPN (2024): Which VPN Is Better?

Mullvad vs NordVPN (2024): Which VPN Should You Choose?

U.S. CISA adds Veeam Backup and Replication flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

SonicWall warns of an exploitable SonicOS vulnerability

Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warns

Major VPN Flaw Exposed: “TunnelVision” (CVE-2024-3661) Threatens Security on Public Networks

CyberGhost vs NordVPN (2024): Which VPN Should You Choose?

Active Exploits Target Cisco ASA and FTD VPNs: Urgent Update Needed (CVE-2024-20481)

Surfshark vs IPVanish (2024): Which VPN Should You Choose?

Private Internet Access (PIA) vs ExpressVPN (2024): Which VPN Is Better?

A new campaign is likely targeting a zero-day in Fortinet FortiGate firewalls

Apple Removes VPN Apps from Russian App Store Amid Government Pressure

CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys

6 Best VPNs for Australia in 2024

Check Point released hotfix for actively exploited VPN zero-day

6 Best Anonymous (No-Log) VPNs for 2024

U.S. CISA adds Array Networks AG and vxAG ArrayOS flaw to its Known Exploited Vulnerabilities catalog

Microsoft says April Windows updates break VPN connections

Surfshark vs NordVPN (2024): Which VPN Should You Choose?

PureVPN vs NordVPN (2024): Which VPN Should You Choose?

6 Best VPNs for the UK in 2024

The Top 7 NordVPN Alternatives for 2024

Feds Charge Five Men in ‘Scattered Spider’ Roundup

NailaoLocker ransomware targets EU healthcare-related entities

Best VPN For 2024: Tested By Privacy Experts

CVE-2024-24919: Active Exploitation of Check Point Remote Access VPN Vulnerability

6 Best VPNs for Canada in 2024 (Free & Paid VPNs)

CVE-2024-5594 (CVSS 9.1): Critical Vulnerability in OpenVPN Enables Code Execution

HideMy.name VPN Review 2024: Is It Worth It?

Stay Connected