NSA, CISA release Guidance on hardening remote access via VPN solutionsSecurity Affairs·Sep 29, 11:50 UTC · Sep 29, 2021Ransomware57
DHS assessment of foreign VPN apps finds security risk real, data lackingCyberScoop·May 30, 16:41 UTC · May 30, 2019Ransomware in the wild60
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware GroupsThe Hacker News·May 23, 05:07 UTC · May 23, 2026Ransomware57
Bulletproof VPN services took down in a global police operationSecurity Affairs·Dec 23, 06:56 UTC · Dec 23, 2020Ransomware57
Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacksSecurity Affairs·Sep 8, 17:43 UTC · Sep 8, 2023Ransomware in the wildCVE-2023-2026960
Despite known security issues, VPN usage continues to thriveHelp Net Security·Jun 24, 00:00 UTC · Jun 24, 2022Ransomware57
Hacker leaks passwords for 900+ Pulse Secure VPN enterprise serversSecurity Affairs·Aug 5, 13:26 UTC · Aug 5, 2020RansomwareCVE-2019-1151060
Global law enforcement operation takes First VPN offlineSecurity Affairs·May 21, 17:59 UTC · May 21, 2026Ransomware60
Akira ransomware: From SonicWall VPN login to encryption in under four hoursHelp Net Security·Sep 29, 00:00 UTC · Sep 29, 2025RansomwareCVE-2024-4076660
SonicWall SSL VPN Attacks Escalate, Bypassing MFAInfosecurity Magazine·Sep 29, 10:30 UTC · Sep 29, 2025RansomwareCVE-2024-4076660
65% of companies are considering adopting VPN alternativesHelp Net Security·Sep 29, 00:00 UTC · Sep 29, 2022Ransomware60
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 SetupsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Ransomware in the wildCVE-2026-50751CVE-2026-5075260
European authorities take down prolific cybercrime VPN serviceCyberScoop·May 21, 16:05 UTC · May 21, 2026Ransomware in the wild60
Akira ransomware gang spotted targeting Cisco VPN products to hack organizationsSecurity Affairs·Aug 31, 14:33 UTC · Aug 31, 2023Ransomware57
VPN service favored by ransomware groups is sanctioned by USThe Record·Jul 13, 18:57 UTC · Jul 13, 2026Ransomware60
Attackers are bypassing MFA on SonicWall VPNs because something was wrong with previous fixSecurity Affairs·May 21, 14:29 UTC · May 21, 2026Ransomware in the wildCVE-2024-1280260
Fog and Akira ransomware attacks exploit SonicWall VPN flawSecurity Affairs·Oct 29, 11:51 UTC · Oct 29, 2024Ransomware in the wildCVE-2024-4076660
NSA, CISA publish guide for securing VPN serversThe Record·Dec 14, 00:00 UTC · Dec 14, 2022Ransomware57
Analysis of dark web posts selling access to corporate networksKaspersky Securelist·Jun 15, 10:00 UTC · Jun 15, 2022Ransomware57
Europol Shuts Down VPNLab, Cybercriminals' Favourite VPN ServiceThe Hacker News·Jan 18, 13:23 UTC · Jan 18, 2022Ransomware57
International sting shuts down 'favorite' VPN of cybercriminalsCyberScoop·Dec 22, 14:34 UTC · Dec 22, 2020Ransomware in the wild60
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware SupportThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2018-0171CVE-2008-412860
Treasury sanctions First VPN Service, others for abetting ransomware gangsCyberScoop·Jul 14, 15:41 UTC · Jul 14, 2026Ransomware in the wild60
Europe dismantles VPN service used by cybercriminals to hide ransomware attacksThe Record·May 21, 13:36 UTC · May 21, 2026Ransomware60
Authorities dismantle First VPN, used by ransomware actorsHelp Net Security·May 21, 00:00 UTC · May 21, 2026Ransomware60
Five-year-old Fortinet FortiOS SSL VPN flaw actively exploitedSecurity Affairs·Dec 25, 19:40 UTC · Dec 25, 2025Ransomware in the wildCVE-2020-12812CVE-2018-13379CVE-2019-559160
SonicWall Investigating Potential SSL VPN ZeroThe Hacker News·Aug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild60
VPNs remain a risky gamble for remote accessHelp Net Security·Aug 4, 00:00 UTC · Aug 4, 2023Ransomware60
Law enforcement shutdown the VPN service VPNLabSecurity Affairs·Jan 18, 16:13 UTC · Jan 18, 2022Ransomware57
Elexon, a middleman in the UK power grid network hit by cyberSecurity Affairs·May 17, 07:57 UTC · May 17, 2020RansomwareCVE-2019-11510CVE-2019-11539CVE-2018-1337960
Vulnerable VPN appliances at healthcare organizations open doors for ransomware gangsHelp Net Security·Apr 2, 00:00 UTC · Apr 2, 2020Ransomware60
U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware LossesSecurity Affairs·Jul 14, 19:47 UTC · Jul 14, 2026Ransomware60
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over DevicesThe Hacker News·Oct 22, 04:20 UTC · Oct 22, 2025RansomwareCVE-2025-9242CVE-2025-3600CVE-2025-3660460
A critical WatchGuard Fireware flaw could allow unauthenticated code executionSecurity Affairs·Oct 17, 14:09 UTC · Oct 17, 2025RansomwareCVE-2025-924260
Attackers exploit valid logins in SonicWall SSL VPN compromiseSecurity Affairs·Oct 11, 16:03 UTC · Oct 11, 2025RansomwareCVE-2024-4076660
Remote Threats to Remote Employees: How Working From Home Increases the Attack SurfaceRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025RansomwareCVE-2019-1579CVE-2019-11510CVE-2018-13379+1 CVEs60
Cring ransomware deployed targeting unpatched Fortinet VPN devicesSecurity Affairs·Apr 7, 22:04 UTC · Apr 7, 2021RansomwareCVE-2018-13379CVE-2020-12812CVE-2019-559160
Black Kingdom ransomware operators exploit Pulse VPN flawsSecurity Affairs·Jun 15, 13:44 UTC · Jun 15, 2020RansomwareCVE-2019-11510CVE-2019-1153960
Why traditional network perimeter security no longer protectsHelp Net Security·Jun 9, 00:00 UTC · Jun 9, 2020Ransomware60
Akira Ransomware gang targets Cisco ASA without MultiSecurity Affairs·Aug 31, 15:00 UTC · Aug 31, 2023Ransomware57