Remove Cybersecurity Remove Passwords Remove VPN
article thumbnail

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. How AI and automation are amplifying the scale and sophistication of VPN attacks.

VPN 133
article thumbnail

More Than Two Million Stolen VPN Passwords Discovered

Security Boulevard

million stolen VPN passwords have been compromised by malware in the past year, highlighting a growing risk for unauthorized access to secure networks, according to a Specops Software report. The post More Than Two Million Stolen VPN Passwords Discovered appeared first on Security Boulevard. More than 2.1

VPN 138
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Attackers exploited SonicWall SMA appliances since January 2025

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) added the flaw CVE-2021-20035 , to its Known Exploited Vulnerabilities (KEV) catalog. Arctic Wolf has uncovered an active campaign, running from January to April 2025, targeting SonicWall SMA 100 series appliances to steal VPN credentials. This week, the U.S.

Passwords 106
article thumbnail

Netflix password sharing crackdown can be hacked with a new VPN

CyberSecurity Insiders

To all those who are concerned about Netflix’s decision to ban password sharing in almost 100 countries, here’s a solution that appears to work for now. A new VPN called Meshnet allows multiple users to connect from the same IP address, using a technique known as ‘Tunneling.’

VPN 125
article thumbnail

International law enforcement operation dismantled RedLine and Meta infostealers

Security Affairs

The two infostealers allowed operators to harvest usernames, passwords, contact info, and crypto-wallets from victims, the threat actors sold this data to criminals for financial theft and hacking. Use a password manager : Simplifies managing strong, unique passwords across accounts. payment info) may have been compromised.

article thumbnail

21 million free VPN users’ data exposed

Malwarebytes

Detailed credentials for more than 21 million mobile VPN app users were swiped and advertised for sale online last week, offered by a cyber thief who allegedly stole user data collected by the VPN apps themselves. So this is a mess, and a timely reminder of why trust in a VPN provider is so crucial.

VPN 145
article thumbnail

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog. is a Denial of Service (DoS) issue that impacts the Remote Access VPN (RAVPN) service of ASA and FTD. Services that are not related to VPN are not affected.”

VPN 113