Authentication and VPN - Cyber Security Informer

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Security Affairs

NOVEMBER 19, 2024

Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware. ” reads the advisory.

VPN

VPN Malware Spyware Authentication

Securing the WireGuard VPN with 2FA Authentication

Security Boulevard

APRIL 16, 2023

Securing a VPN with 2-factor Authentication (2FA) provides an additional layer of security to protect your online activities and data. The post Securing the WireGuard VPN with 2FA Authentication appeared first on LogonBox. The post Securing the WireGuard VPN with 2FA Authentication appeared first on Security Boulevard.

VPN

VPN Authentication Network Security

Check Point released hotfix for actively exploited VPN zero-day

Security Affairs

MAY 29, 2024

Check Point released hotfixes for a VPN zero-day vulnerability, tracked as CVE-2024-24919, which is actively exploited in attacks in the wild. Check Point released hotfixes to address a VPN zero-day vulnerability, tracked as CVE-2024-24919 , which is actively being exploited in attacks in the wild.

VPN

VPN Authentication Passwords Accountability

Cisco warns of large-scale brute-force attacks against VPN and SSH services

Security Affairs

APRIL 16, 2024

Cisco Talos warns of large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services.

VPN

VPN Firewall Authentication Hacking

How Does a VPN Work? A Comprehensive Beginner’s Overview

eSecurity Planet

AUGUST 27, 2024

A virtual private network (VPN) does more than just mask your identity—it fundamentally changes how your data moves across the internet. But what’s really going on under the hood when you browse the web using a VPN? Step 3: Data Transmission to the VPN Server The encrypted data is then transmitted to the VPN server.

VPN

VPN Encryption Internet Internet

New TunnelVision technique can bypass the VPN encapsulation

Security Affairs

MAY 8, 2024

TunnelVision is a new VPN bypass technique that enables threat actors to spy on users’ traffic bypassing the VPN encapsulation. Leviathan Security researchers recently identified a novel attack technique, dubbed TunnelVision, to bypass VPN encapsulation. The researchers referred to this result as “decloaking.”

VPN

VPN Firewall Marketing Encryption

Supercharging Your Fortinet FortiGate VPN With Duo SSO

Duo's Security Blog

OCTOBER 30, 2024

Let's talk about how Duo SSO is revolutionizing FortiGate VPN access. Picture this: You're securing VPN logins in under an hour, authenticating users in seconds and saying goodbye to those pesky stolen credential risks. Connect your FortiGate VPN to Duo SSO using SAML 2.0 (it's Sounds too good to be true?

VPN

VPN Authentication Firewall Risk

Check Point Warns of Hackers Targeting Its Remote Access VPN

SecureWorld News

MAY 28, 2024

Threat actors are targeting Check Point Remote Access VPN devices in an ongoing campaign to breach enterprise networks, the company has warned in a new advisory. We have recently witnessed compromised VPN solutions, including various cyber security vendors.

VPN

VPN Passwords Authentication Architecture

News Alert: i2Coalition launches ‘VPN Trust Initiative’ to promote VPN operators’ best practices

The Last Watchdog

SEPTEMBER 26, 2023

26, 2023 — The Internet Infrastructure Coalition (i2Coalition) launched the VPN Trust Initiative (VTI) in 2020 to establish a baseline for how virtual private network (VPN) providers should operate. Advertising Practices: Given the complexity and different use cases for VPNs, claims must not mislead.

VPN

VPN Internet Internet Technology

Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

Security Affairs

AUGUST 31, 2023

Cisco is aware of attacks conducted by Akira ransomware threat actors targeting Cisco ASA VPNs that are not configured for multi-factor authentication. “This highlights the importance of enabling multi-factor authentication (MFA) in VPN implementations. . ” reads a post published by Cisco PSIRT.

Authentication

Authentication Ransomware VPN Hacking

Revolutionizing Cisco VPN Access with Duo SSO

Duo's Security Blog

JANUARY 11, 2024

Secure Cisco VPN logins in less than an hour Authenticate users in seconds Verify user + device posture Blog unmanaged devices Mitigate modern security threats with phishing-resistant authentication Join the thousands of Cisco firewall customers who take advantage of protecting Cisco VPN logins with Cisco Duo Single Sign-On via SAML 2.0

VPN

VPN Authentication Firewall Risk

A zero-day in Atlas VPN Linux Client leaks users’ IP address

Security Affairs

SEPTEMBER 6, 2023

Experts warn of an Atlas VPN zero-day flaw impacting the Linux client that can reveal the user’s IP address by visiting a website. A Reddit user with the handle ‘Educational-Map-8145’ published a proof of concept exploit for a zero-day flaw in the Linux client of Atlas VPN. It does not have ANY authentication.

VPN

VPN Education Authentication Engineering

Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

The Hacker News

APRIL 17, 2024

Cisco is warning about a global surge in brute-force attacks targeting various devices, including Virtual Private Network (VPN) services, web application authentication interfaces, and SSH services, since at least March 18, 2024.

VPN

VPN Authentication

Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now

Bleeping Computer

JUNE 11, 2023

Fortinet has released new Fortigate firmware updates that fix an undisclosed, critical pre-authentication remote code execution vulnerability in SSL VPN devices. [.]

VPN

VPN Firmware Authentication

CVE-2024-22394 Exposed: SonicWall SSL-VPN’s Authentication Flaw

Penetration Testing

FEBRUARY 9, 2024

Recently, a critical flaw, nestled within the SSL-VPN feature of SonicWall’s SonicOS, has been brought to light, exposing a gap wide enough for remote attackers to slip through unnoticed.

Authentication

Authentication Penetration Testing VPN

Revolutionizing Palo Alto VPN Access With Duo SSO

Duo's Security Blog

AUGUST 6, 2024

Join the thousands of Palo Alto firewall customers who take advantage of protecting Palo Alto VPN logins with Duo Single Sign-On via SAML 2.0 Duo SSO simplifies the authentication process for users by providing a single point of access to multiple applications. to help prevent unwanted access and streamline the user experience.

VPN

VPN Artificial Intelligence Authentication Firewall

ASUS fixed critical remote authentication bypass bug in several routers

Security Affairs

JUNE 16, 2024

Taiwanese manufacturer giant ASUS addressed a critical remote authentication bypass vulnerability impacting several router models. ASUS addresses a critical remote authentication bypass vulnerability, tracked as CVE-2024-3080 (CVSS v3.1 score: 9.8), impacting seven router models. impacting multiple devices.

Authentication

Authentication Firmware VPN Manufacturing

Death of the VPN: A Security Eulogy

SecureWorld News

SEPTEMBER 4, 2022

VPNs or Virtual Private Networks were born out of necessity for businesses to keep their data safe while employees accessed these private networks. Unlike the original PPTP protocol, VPN allows many users and devices simultaneous access to private networks across a very public internet.

VPN

VPN Internet Internet Encryption

Zyxel warns of critical vulnerabilities in firewall and VPN devices

Bleeping Computer

MAY 25, 2023

Zyxel is warning customers of two critical-severity vulnerabilities in several of its firewall and VPN products that attackers could leverage without authentication. [.]

Firewall

Firewall VPN Authentication

Understanding Multi-Factor Authentication

Security Through Education

OCTOBER 7, 2024

One of the main topics emphasized during this month is Multi-Factor Authentication (MFA). What is Multi-Factor Authentication (MFA)? Even if someone gets past the first lock (your password), they have to face another lock (the second factor of authentication) before entering. Think of it as adding an extra layer of protection.

Authentication

Authentication Social Engineering Passwords Engineering

Multiple malware used in attacks exploiting Ivanti VPN flaws

Security Affairs

FEBRUARY 1, 2024

Mandiant spotted new malware used by a China-linked threat actor UNC5221 targeting Ivanti Connect Secure VPN and Policy Secure devices. Mandiant researchers discovered new malware employed by a China-linked APT group known as UNC5221 and other threat groups targeting Ivanti Connect Secure VPN and Policy Secure devices.

VPN

VPN Malware Authentication Hacking

Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws

Security Affairs

JANUARY 16, 2024

Experts warn that recently disclosed Ivanti Connect Secure VPN and Policy Secure vulnerabilities are massively exploited in the wild. is an Authentication Bypass issue that resides in the web component of Ivanti ICS 9.x, The flaw CVE-2023-46805 (CVSS score 8.2) x and Ivanti Policy Secure. x) and Ivanti Policy Secure.

VPN

VPN Authentication Small Business Telecommunications

NSA, CISA release guidance on hardening remote access via VPN solutions

Security Affairs

SEPTEMBER 29, 2021

CISA and the NSA agencies have published guidance for securely using virtual private network (VPN) solutions. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released guidance for increasing the security of virtual private network (VPN) solutions.

VPN

VPN Government Firmware Authentication

Announcing Duo’s Vision to Streamline Authentication & Enhance User Experience

Duo's Security Blog

JUNE 8, 2023

Some of it is positive, but the general consensus is that people don’t love multi-factor authentication (MFA); they see it as a necessary evil at best. That’s why I’m so excited to announce our vision to streamline Duo’s authentication workflows, a feature that will deliver seamless, secure login experiences.

Authentication

Authentication VPN System Administration Engineering

Cisco won’t fix authentication bypass zero-day in EoL routers

Bleeping Computer

SEPTEMBER 8, 2022

Cisco says that a new authentication bypass flaw affecting multiple small business VPN routers will not be patched because the devices have reached end-of-life (EoL). [.].

Authentication

Authentication Small Business VPN

How to Use a VPN: Complete User Guide

eSecurity Planet

SEPTEMBER 5, 2024

A VPN (Virtual Private Network) routes your internet traffic through an encrypted tunnel, shielding your data from hackers and ensuring your online activities remain private and secure. A VPN can provide the solution if you want to safeguard your personal information, bypass geo-restrictions, or maintain anonymity online.

VPN

VPN Encryption Internet Internet

Legacy Authentication Protocols: Why RADIUS Is (Still) Important

Duo's Security Blog

MAY 23, 2024

When reading the title of this blog, you might be wondering to yourself why RADIUS is being highlighted as a subject — especially amidst all of the advancements of modern authentication we see taking place recently. It is commonly used for network access into VPNs, wireless access points, and other devices (more on this later).

Authentication

Authentication Wireless Passwords Encryption

Akira ransomware gang spotted targeting Cisco VPN products to hack organizations

Security Affairs

AUGUST 22, 2023

The Akira ransomware gang targets Cisco VPN products to gain initial access to corporate networks and steal their data. The group now is targeting Cisco VPN products to gain initial access to corporate networks. Sophos researchers observed in May the threat actor using compromised Cisco VPN accounts to breach target networks.

VPN

VPN Ransomware Hacking Education

Hackers Leak 87,000 Fortinet VPN Passwords

eSecurity Planet

SEPTEMBER 9, 2021

In an advisory , Fortinet said the path traversal vulnerability in the FortiOS SSL VPN web portal may allow an attacker to download FortiOS system files through specially crafted HTTP resource requests. to 5.4.12; if the SSL VPN service (web-mode or tunnel-mode) is enabled. Passwordless Authentication 101.

VPN

VPN Passwords Authentication Network Security

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

The Hacker News

JANUARY 12, 2024

As many as five different malware families were deployed by suspected nation-state actors as part of post-exploitation activities leveraging two zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances since early December 2023.

VPN

VPN Malware Authentication

Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware

Security Affairs

JANUARY 31, 2024

Threat actors are exploiting recently disclosed zero-day flaws in Ivanti Connect Secure (ICS) VPN devices to deliver KrustyLoader. is an Authentication Bypass issue that resides in the web component of Ivanti ICS 9.x, The flaw CVE-2023-46805 (CVSS score 8.2) x and Ivanti Policy Secure. x) and Ivanti Policy Secure.

VPN

VPN Malware Authentication Small Business

Authentication Alone Is Failing: Introducing Continuous Identity Security

Duo's Security Blog

MAY 6, 2024

The security industry has diligently battled compromised credentials, evolving from passwords to multifactor authentication (MFA) to passwordless — our most secure and phishing-resistant method to date — and one that is fully supported in Duo. This means there are serious holes in our authentication armor today.

Authentication

Authentication Accountability VPN Phishing

Best Practices to Strengthen VPN Security

Security Boulevard

APRIL 24, 2024

VPNs provide an essential layer of protection for employees working remotely or across multiple office locations, encrypting data traffic to stop hackers from intercepting and stealing information. The post Best Practices to Strengthen VPN Security appeared first on Security Boulevard.

VPN

VPN Encryption Risk Authentication

Microsoft testing File Explorer access keys, new VPN status icon

Bleeping Computer

MARCH 8, 2023

Microsoft has released a new Windows 11 preview build with new features such as File Explorer access keys, a new VPN status indicator, and a new way to copy two-factor authentication (2FA) codes from text messages. [.]

VPN

VPN Authentication

How to Get a VPN on Any Device (+ Installation Tips)

eSecurity Planet

AUGUST 20, 2024

A virtual private network (VPN) is a must for any internet user connecting to business systems. Use this guide to learn how to get a VPN provider, set it up, and connect your devices for a more secure and safe connection. Use Like most software, VPN clients are system-specific — Apple versus Windows, iOS versus Android.

VPN

VPN Internet Internet Encryption

Remote Workforce? Consider These Five Reasons to Offer a VPN To Remote Employees

Adam Levin

MARCH 19, 2020

It Can Add Another Factor of Authentication: Multi-factor authentication isn’t perfect, but it does help add an extra layer of security to your network. You Can Restrict Access To Company Data: Restricting access to a VPN to current employees means it’s easier to spot a usage anomaly. The post Remote Workforce?

VPN

VPN Firewall Authentication Passwords

SHARED INTEL: Coming very soon — ‘passwordless authentication’ as a de facto security practice

The Last Watchdog

NOVEMBER 11, 2020

As a tradeoff for enjoying our digital lives, we’ve learned to live with password overload and even tolerate two-factor authentication. I had a chance to discuss this seminal transition with George Avetisov, co-founder and chief executive officer of HYPR , a Manhattan-based supplier of advanced authentication technologies.

Authentication

Authentication VPN Passwords Hacking

Clear VPN Review – The Pros And Cons Of Using VPN Services

SecureBlitz

SEPTEMBER 10, 2021

One of the many ways to find out the truth is to use Clear VPN review. The information provided is authentic and comes from the actual users who have tested each and every product extensively. The post Clear VPN Review – The Pros And Cons Of Using VPN Services appeared first on SecureBlitz Cybersecurity.

VPN

VPN Authentication Cybersecurity

Pulse Secure VPN zero-day used to hack defense firms, govt orgs

Bleeping Computer

APRIL 20, 2021

Pulse Secure has shared mitigation measures for a zero-day authentication bypass vulnerability in the Pulse Connect Secure (PCS) SSL VPN appliance actively exploited in attacks against worldwide organizations and focused on US Defense Industrial base (DIB) networks. [.].

VPN

VPN Hacking Authentication

Citrix ADC and Citrix Gateway are affected by a critical authentication bypass flaw

Security Affairs

NOVEMBER 8, 2022

Citrix released security updates to address a critical authentication bypass vulnerability in Citrix ADC and Citrix Gateway. Citrix is urging customers to install security updates to address a critical authentication bypass issue, tracked as CVE-2022-27510, in Citrix ADC and Citrix Gateway. Pierluigi Paganini.

Authentication

Authentication VPN Phishing Hacking

Hacker leaks passwords for 900+ Pulse Secure VPN enterprise servers

Security Affairs

AUGUST 5, 2020

ZDNet reported in exclusive that a list of passwords for 900+ enterprise VPN servers has been shared on a Russian-speaking hacker forum. ZDNet has reported in exclusive that a list of plaintext usernames and passwords for 900 Pulse Secure VPN enterprise servers, along with IP addresses, has been shared on a Russian-speaking hacker forum.

VPN

VPN Passwords Banking Advertising

Zyxel firewall and VPN devices affected by critical flaws

Security Affairs

MAY 25, 2023

Zyxel fixed two critical flaws in multiple firewall and VPN products that can lead to remote code execution or cause a DoS condition. Zyxel addressed two critical buffer overflow vulnerabilities, tracked as CVE-2023-33009 and CVE-2023-33010 , that affect several of its firewall and VPN products. Patch 2 VPN ZLD V4.30

Firewall

Firewall VPN Authentication Hacking

Cisco Raises Concerns Over Surge in Brute-Force Attacks Targeting VPN and Web Services

Centraleyes

APRIL 18, 2024

Cisco has sounded the alarm on a widespread increase in brute-force attacks targeting various devices, including Virtual Private Network (VPN) services, web application authentication interfaces, and SSH services, since March 18, 2024. The attacks appear to originate from TOR exit nodes and other anonymizing tunnels and proxies.

VPN

VPN Firewall Authentication Passwords

CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

Security Affairs

FEBRUARY 1, 2024

The government experts also ordered to monitor the authentication or identity management services that could be exposed and urged to isolate the systems from any enterprise resources to the greatest degree possible. is an Authentication Bypass issue that resides in the web component of Ivanti ICS 9.x, x and Ivanti Policy Secure.

VPN

VPN Authentication Software Malware

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Securing the WireGuard VPN with 2FA Authentication

Trending Sources

Check Point released hotfix for actively exploited VPN zero-day

Cisco warns of large-scale brute-force attacks against VPN and SSH services

How Does a VPN Work? A Comprehensive Beginner’s Overview

New TunnelVision technique can bypass the VPN encapsulation

Supercharging Your Fortinet FortiGate VPN With Duo SSO

Check Point Warns of Hackers Targeting Its Remote Access VPN

News Alert: i2Coalition launches ‘VPN Trust Initiative’ to promote VPN operators’ best practices

Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

Revolutionizing Cisco VPN Access with Duo SSO

A zero-day in Atlas VPN Linux Client leaks users’ IP address

Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now

CVE-2024-22394 Exposed: SonicWall SSL-VPN’s Authentication Flaw

Revolutionizing Palo Alto VPN Access With Duo SSO

ASUS fixed critical remote authentication bypass bug in several routers

Death of the VPN: A Security Eulogy

Zyxel warns of critical vulnerabilities in firewall and VPN devices

Understanding Multi-Factor Authentication

Multiple malware used in attacks exploiting Ivanti VPN flaws

Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws

NSA, CISA release guidance on hardening remote access via VPN solutions

Announcing Duo’s Vision to Streamline Authentication & Enhance User Experience

Cisco won’t fix authentication bypass zero-day in EoL routers

How to Use a VPN: Complete User Guide

Legacy Authentication Protocols: Why RADIUS Is (Still) Important

Akira ransomware gang spotted targeting Cisco VPN products to hack organizations

Hackers Leak 87,000 Fortinet VPN Passwords

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware

Authentication Alone Is Failing: Introducing Continuous Identity Security

Best Practices to Strengthen VPN Security

Microsoft testing File Explorer access keys, new VPN status icon

How to Get a VPN on Any Device (+ Installation Tips)

Remote Workforce? Consider These Five Reasons to Offer a VPN To Remote Employees

SHARED INTEL: Coming very soon — ‘passwordless authentication’ as a de facto security practice

Clear VPN Review – The Pros And Cons Of Using VPN Services

Pulse Secure VPN zero-day used to hack defense firms, govt orgs

Citrix ADC and Citrix Gateway are affected by a critical authentication bypass flaw

Hacker leaks passwords for 900+ Pulse Secure VPN enterprise servers

Zyxel firewall and VPN devices affected by critical flaws

Cisco Raises Concerns Over Surge in Brute-Force Attacks Targeting VPN and Web Services

CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

Stay Connected