DHS assessment of foreign VPN apps finds security risk real, data lackingCyberScoop·May 30, 16:41 UTC · May 30, 2019Ransomware in the wild60
Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacksSecurity Affairs·Sep 8, 17:43 UTC · Sep 8, 2023Ransomware in the wildCVE-2023-2026960
Hacker leaks passwords for 900+ Pulse Secure VPN enterprise serversSecurity Affairs·Aug 5, 13:26 UTC · Aug 5, 2020RansomwareCVE-2019-1151060
Global law enforcement operation takes First VPN offlineSecurity Affairs·May 21, 17:59 UTC · May 21, 2026Ransomware60
Akira ransomware: From SonicWall VPN login to encryption in under four hoursHelp Net Security·Sep 29, 00:00 UTC · Sep 29, 2025RansomwareCVE-2024-4076660
SonicWall SSL VPN Attacks Escalate, Bypassing MFAInfosecurity Magazine·Sep 29, 10:30 UTC · Sep 29, 2025RansomwareCVE-2024-4076660
65% of companies are considering adopting VPN alternativesHelp Net Security·Sep 29, 00:00 UTC · Sep 29, 2022Ransomware60
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 SetupsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Ransomware in the wildCVE-2026-50751CVE-2026-5075260
European authorities take down prolific cybercrime VPN serviceCyberScoop·May 21, 16:05 UTC · May 21, 2026Ransomware in the wild60
VPN service favored by ransomware groups is sanctioned by USThe Record·Jul 13, 18:57 UTC · Jul 13, 2026Ransomware60
Fog and Akira ransomware attacks exploit SonicWall VPN flawSecurity Affairs·Oct 29, 11:51 UTC · Oct 29, 2024Ransomware in the wildCVE-2024-4076660
International sting shuts down 'favorite' VPN of cybercriminalsCyberScoop·Dec 22, 14:34 UTC · Dec 22, 2020Ransomware in the wild60
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware SupportThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2018-0171CVE-2008-412860
Treasury sanctions First VPN Service, others for abetting ransomware gangsCyberScoop·Jul 14, 15:41 UTC · Jul 14, 2026Ransomware in the wild60
Europe dismantles VPN service used by cybercriminals to hide ransomware attacksThe Record·May 21, 13:36 UTC · May 21, 2026Ransomware60
Authorities dismantle First VPN, used by ransomware actorsHelp Net Security·May 21, 00:00 UTC · May 21, 2026Ransomware60
Five-year-old Fortinet FortiOS SSL VPN flaw actively exploitedSecurity Affairs·Dec 25, 19:40 UTC · Dec 25, 2025Ransomware in the wildCVE-2020-12812CVE-2018-13379CVE-2019-559160
SonicWall Investigating Potential SSL VPN ZeroThe Hacker News·Aug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild60
VPNs remain a risky gamble for remote accessHelp Net Security·Aug 4, 00:00 UTC · Aug 4, 2023Ransomware60
Elexon, a middleman in the UK power grid network hit by cyberSecurity Affairs·May 17, 07:57 UTC · May 17, 2020RansomwareCVE-2019-11510CVE-2019-11539CVE-2018-1337960
Vulnerable VPN appliances at healthcare organizations open doors for ransomware gangsHelp Net Security·Apr 2, 00:00 UTC · Apr 2, 2020Ransomware60
U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware LossesSecurity Affairs·Jul 14, 19:47 UTC · Jul 14, 2026Ransomware60
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over DevicesThe Hacker News·Oct 22, 04:20 UTC · Oct 22, 2025RansomwareCVE-2025-9242CVE-2025-3600CVE-2025-3660460
A critical WatchGuard Fireware flaw could allow unauthenticated code executionSecurity Affairs·Oct 17, 14:09 UTC · Oct 17, 2025RansomwareCVE-2025-924260
Black Kingdom ransomware operators exploit Pulse VPN flawsSecurity Affairs·Jun 15, 13:44 UTC · Jun 15, 2020RansomwareCVE-2019-11510CVE-2019-1153960
Why traditional network perimeter security no longer protectsHelp Net Security·Jun 9, 00:00 UTC · Jun 9, 2020Ransomware60
Half of Ransomware Access Due to Hijacked VPN CredentialsInfosecurity Magazine·Nov 19, 09:40 UTC · Nov 19, 2025RansomwareCVE-2025-53770CVE-2025-54309CVE-2025-20333+2 CVEs60
Fortinet says VPN bug ‘may have been exploited in a limited number of cases’The Record·Jun 13, 18:21 UTC · Jun 13, 2023RansomwareCVE-2023-2799760
International effort takes down VPN service, VPNLab, used for criminal activityCyberScoop·Jan 19, 01:56 UTC · Jan 19, 2022Ransomware in the wild60
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 AccountsThe Hacker News·Oct 11, 13:30 UTC · Oct 11, 2025RansomwareCVE-2024-4076660
SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware HackersThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2025Ransomware in the wildCVE-2024-4076660
Uptick in Akira Ransomware Actors Targeting SonicWall VPNsInfosecurity Magazine·Aug 4, 10:30 UTC · Aug 4, 2025Ransomware60
Cisco Talos shares insights related to recent cyber attack on CiscoCisco Talos·Aug 10, 19:30 UTC · Aug 10, 2022Ransomware60
Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacksSecurity Affairs·Apr 2, 07:39 UTC · Apr 2, 2020Ransomware60
From legacy to SaaS: Why complexity is the enemy of enterprise securityHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2025Ransomware60
Akira Ransomware targets SonicWall VPNs in likely zeroSecurity Affairs·Aug 3, 13:22 UTC · Aug 3, 2025Ransomware60
Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on FullyThe Hacker News·Aug 2, 13:19 UTC · Aug 2, 2025Ransomware60
Most interesting IR cases in 2023: insider threats and moreKaspersky Securelist·Sep 3, 11:01 UTC · Sep 3, 2024Ransomware60
CISA Order Highlights Persistent Risk at Network EdgeKrebs on Security·Jun 15, 00:00 UTC · Jun 15, 2023Ransomware in the wildCVE-2023-2799760