Search: “Always On VPN”

142 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 248 Ransomware 197 Vulnerability 142 Malware 124 Data breach 93 Policy & legal 76 Threat actor 54 Phishing & fraud 40 Industry 34 Advisory 6 AI tools & infra 5 Research 4 Tools 3 AI safety & security 3

SeverityAll critical 650 high 170 medium 112 low 83 info 17

Windows 11 Security Update KB5124008 Breaks Always-On VPN Connections

Microsoft's September 2026 Windows 11 update KB5124008 breaks certificate-based Always On VPN on some enterprise clients, forcing admins to pause rollout.

Microsoft's September 8, 2026 cumulative update KB5124008 for Windows 11 24H2 (build 26100.9445) and 25H2 (build 26200.9445) breaks certificate-based Always On VPN tunnels on some enterprise clients, with connectivity restored after uninstalling the update and rebooting. The issue was first detailed on Microsoft Q&A on September 9 by an administrator using Intune-deployed VPN profiles with RRAS and NPS on Windows Server 2019. The same mandatory Patch Tuesday package fixes two actively exploited zero-days, CVE-2026-81963 in the Windows Update Stack and CVE-2026-85880 in Windows Advanced Local Procedure Call, so many teams are pausing only VPN cohorts rather than blocking the full rollout.

Cyber Security Newsupdated Sep 16, 16:06 UTC · 11h agofirst Sep 11, 13:11 UTC · 5d agoVulnerability in the wild 14 sources CVE-2026-81963 CVE-2026-858802

Novel attack against virtually all VPN apps neuters their entire purpose

Ars Technica · SecurityMay 6, 20:35 UTC · May 6, 2024Vulnerability CVE-2024-3661

COVID-19 Shift to Security Enabled by Evolving Device Management

Infosecurity MagazineOct 7, 09:01 UTC · Oct 7, 2020Vulnerability

How secure are cryptocurrency mobile apps?

Help Net SecurityNov 21, 07:36 UTC · Nov 21, 2023Vulnerability

Portnox provides risk assessment and management to all levels of access

Help Net SecurityOct 11, 00:00 UTC · Oct 11, 2018Vulnerability

Microsoft Exchange Vulnerability CVE-2026-62911: What Administrators Should Do and How Zscaler Can Help

High-severity authentication bypass CVE-2026-62911 in Exchange Server has public exploit code; about 22,000 servers remain unpatched and internet-exposed.

Microsoft's August 2026 Patch Tuesday fixed CVE-2026-62911 (CVSS 8.0), an authentication bypass affecting Exchange Server 2016, 2019 and Subscription Edition. Successful exploitation lets an attacker with basic privileges take over all mailboxes on the targeted server, including reading and sending email and downloading attachments. As of September 1, Shadowserver identified roughly 22,000 unpatched, internet-exposed Exchange servers, including about 6,200 in the US and 5,100 in Germany. NCSC-NL confirmed working exploit code is publicly available, while CISA has not yet reported exploitation in the wild.

Zscaler ThreatLabzSep 3, 20:19 UTC · 13d agoVulnerability CVE-2026-629112

CYTRACOM ControlOne empowers MSPs to secure modern cloud networks

Help Net SecurityApr 1, 00:00 UTC · Apr 1, 2022Vulnerability

Wi-Fi security and fake ac/dc charges threaten your data at the 2014 World Cup

Kaspersky SecurelistJun 10, 18:04 UTC · Jun 10, 2014Vulnerability

November Patch Tuesday forecast: .NET, Adobe, Firefox and more

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2017Vulnerability

9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code execution

Cisco TalosOct 25, 16:00 UTC · Oct 25, 2023Vulnerability CVE-2023-22325 CVE-2023-23581 CVE-2023-22308+16 CVEs

CYTRACOM improves efficiency for MSPs with ControlOne platform updates

Help Net SecurityJun 1, 00:00 UTC · Jun 1, 2023Vulnerability

Enhancing security through collaboration with the open-source community

Help Net SecurityJun 18, 00:00 UTC · Jun 18, 2024Vulnerability

ZTNA can be more than a VPN replacement for application access

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2023Vulnerability

Apps, devices and workloads provide an ecosystem cornerstone for zero trust growth

Help Net SecurityMar 1, 00:00 UTC · Mar 1, 2022Vulnerability

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

Ars Technica · SecurityFeb 26, 15:45 UTC · Feb 26, 2026Vulnerability

Ivanti Connect Secure zero-days exploited by attackers (CVE-2023-46805, CVE-2024-21887)

Help Net SecurityJan 16, 16:05 UTC · Jan 16, 2024Vulnerability in the wildCVE-2023-46805 CVE-2024-21887

JetBrains Patches CVSS 9.8 TeamCity Flaw Allowing Server Takeover

Security AffairsJul 28, 11:17 UTC · Jul 28, 2026Vulnerability in the wildCVE-2026-63077

Week in review: Backdoor found in SOHO devices running Linux, high-risk WinRAR RCE flaw patched

Help Net SecurityJun 29, 00:00 UTC · Jun 29, 2025Vulnerability CVE-2025-6218 CVE-2025-49144 CVE-2025-5777

Unpatched Remote Hacking Flaw Disclosed in Fortinet's FortiWeb WAF

The Hacker NewsAug 19, 06:50 UTC · Aug 19, 2021Vulnerability in the wildCVE-2021-22123 CVE-2020-29015 CVE-2018-13379+2 CVEs

TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities

Cisco TalosMay 19, 15:39 UTC · May 19, 2026Vulnerability CVE-2026-30814 CVE-2026-30815 CVE-2026-30816+5 CVEs

Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077 ...

JetBrains fixed critical unauthenticated RCE CVE-2026-63077 in TeamCity On-Premises; update to 2025.11.7 or 2026.1.3.

JetBrains disclosed CVE-2026-63077, a critical unauthenticated remote code execution vulnerability affecting all TeamCity On-Premises versions. An attacker with HTTP(S) access can bypass authentication checks via the TeamCity agent polling protocol and execute arbitrary operating system commands with the privileges of the server process. Fixes are available in versions 2025.11.7 and 2026.1.3, plus a security patch plugin for TeamCity 2017.1+. JetBrains states there is no evidence of active exploitation at disclosure time, and TeamCity Cloud is already mitigated.