Shimo VPN service contains six unpatched vulnerabilities, Talos discoversCyberScoop·Apr 15, 16:21 UTC · Apr 15, 2019Vulnerability in the wildCVE-2018-4004CVE-2018-400760
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 SetupsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Ransomware in the wildCVE-2026-50751CVE-2026-5075260
European authorities take down prolific cybercrime VPN serviceCyberScoop·May 21, 16:05 UTC · May 21, 2026Ransomware in the wild60
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN VulnerabilityThe Hacker News·Dec 23, 04:10 UTC · Dec 23, 2025Vulnerability in the wildCVE-2025-14733CVE-2025-59718CVE-2025-59719+1 CVEs60
RDP and VPN use soars, increasing enterprise cyber riskHelp Net Security·Nov 14, 12:29 UTC · Nov 14, 2023Exploit / PoC in the wildCVE-2019-1573CVE-2019-11510CVE-2018-1337960
A zero-day in Atlas VPN Linux Client leaks users' IP addressSecurity Affairs·Sep 6, 16:50 UTC · Sep 6, 2023Exploit / PoC60
The global impact of the Fortinet 50.000 VPN leak posted onlineSecurity Affairs·Nov 27, 13:03 UTC · Nov 27, 2020Data breachCVE-2018-1337960
UK NCSC agency warns of APTs exploiting Enterprise VPN vulnerabilitiesSecurity Affairs·Oct 6, 10:17 UTC · Oct 6, 2019VulnerabilityCVE-2019-11510CVE-2019-11539CVE-2018-13379+3 CVEs60
Vulnerability Spotlight: CVE-2018-3952 / CVE-2018-4010 - Multi-provider VPN Client Privilege Escalation VulnerabilitiesCisco Talos·Sep 7, 12:44 UTC · Sep 7, 2018Vulnerability in the wildCVE-2018-3952CVE-2018-4010CVE-2018-1016960
VPN service favored by ransomware groups is sanctioned by USThe Record·Jul 13, 18:57 UTC · Jul 13, 2026Ransomware60
CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple CustomersSecurity Affairs·May 31, 17:53 UTC · May 31, 2026Vulnerability in the wildCVE-2026-025760
Attackers are bypassing MFA on SonicWall VPNs because something was wrong with previous fixSecurity Affairs·May 21, 14:29 UTC · May 21, 2026Ransomware in the wildCVE-2024-1280260
China-linked actor's malware DeepData exploits FortiClient VPN zero-daySecurity Affairs·Nov 19, 15:08 UTC · Nov 19, 2024Exploit / PoC60
Fog and Akira ransomware attacks exploit SonicWall VPN flawSecurity Affairs·Oct 29, 11:51 UTC · Oct 29, 2024Ransomware in the wildCVE-2024-4076660
1,700 Ivanti VPN devices compromised. Are yours among them?Help Net Security·Jan 22, 09:55 UTC · Jan 22, 2024Data breachCVE-2023-46805CVE-2024-2188760
Researchers find critical RCE vulnerabilities in industrial VPN solutionsHelp Net Security·Nov 14, 09:17 UTC · Nov 14, 2023VulnerabilityCVE-2020-14500CVE-2020-14508CVE-2020-14510+3 CVEs60
Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacksHelp Net Security·Aug 14, 00:00 UTC · Aug 14, 2023Exploit / PoC in the wildCVE-2023-36672CVE-2023-35838CVE-2023-36673+1 CVEs60
Zyxel says a threat actor is targeting its enterprise firewall and VPN devicesThe Record·Dec 17, 00:00 UTC · Dec 17, 2022Threat actorCVE-2021-3502960
Zerodium is looking for zero-day exploits in ExpressVPN, NordVPN, and Surfshark Win VPN clientsSecurity Affairs·Oct 20, 06:49 UTC · Oct 20, 2021Exploit / PoC60
Cisco fixes critical, high severity vulnerabilities in VPN routersSecurity Affairs·Aug 5, 06:08 UTC · Aug 5, 2021VulnerabilityCVE-2021-1609CVE-2021-160260
International sting shuts down 'favorite' VPN of cybercriminalsCyberScoop·Dec 22, 14:34 UTC · Dec 22, 2020Ransomware in the wild60
Industrial VPN Flaws Could Let Attackers Target Critical InfrastructuresThe Hacker News·Jul 29, 11:12 UTC · Jul 29, 2020VulnerabilityCVE-2020-14500CVE-2020-14511CVE-2020-1449860
Researcher Claims Hotspot Shield VPN Service Exposes You on the InternetThe Hacker News·Feb 7, 13:13 UTC · Feb 7, 2018Exploit / PoCCVE-2018-646060
Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN AppliancesSecurity Affairs·Jul 20, 07:31 UTC · Jul 20, 2026Exploit / PoC in the wildCVE-2026-15409CVE-2026-1541060
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware SupportThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2018-0171CVE-2008-412860
Treasury sanctions First VPN Service, others for abetting ransomware gangsCyberScoop·Jul 14, 15:41 UTC · Jul 14, 2026Ransomware in the wild60
Europe dismantles VPN service used by cybercriminals to hide ransomware attacksThe Record·May 21, 13:36 UTC · May 21, 2026Ransomware60
Authorities dismantle First VPN, used by ransomware actorsHelp Net Security·May 21, 00:00 UTC · May 21, 2026Ransomware60
Five-year-old Fortinet FortiOS SSL VPN flaw actively exploitedSecurity Affairs·Dec 25, 19:40 UTC · Dec 25, 2025Ransomware in the wildCVE-2020-12812CVE-2018-13379CVE-2019-559160
SonicWall Investigating Potential SSL VPN ZeroThe Hacker News·Aug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild60
NachoVPN Tool Exploits Flaws in Popular VPN Clients for System CompromiseThe Hacker News·Dec 3, 10:17 UTC · Dec 3, 2024Exploit / PoC in the wildCVE-2024-5921CVE-2024-2901460
Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warnsSecurity Affairs·Sep 8, 12:06 UTC · Sep 8, 2023Threat actor in the wildCVE-2022-47966CVE-2022-42475CVE-2021-4422860
VPNs remain a risky gamble for remote accessHelp Net Security·Aug 4, 00:00 UTC · Aug 4, 2023Ransomware60
Criminal IP analysis report on zero-day vulnerability in Atlassian ConfluenceHelp Net Security·Mar 9, 20:21 UTC · Mar 9, 2023Exploit / PoCCVE-2022-2613460
Chinese hackers used Pulse Secure VPN zeroThe Record·Jan 26, 00:00 UTC · Jan 26, 2023Exploit / PoCCVE-2021-2289360
Cisco addressed critical flaws in Small Business VPN routersSecurity Affairs·Aug 4, 07:37 UTC · Aug 4, 2022Exploit / PoC in the wildCVE-2022-20842CVE-2022-20827CVE-2022-2084160
Pulse Secure fixes zero-day in Pulse Connect Secure (PCS) SSL VPNSecurity Affairs·May 3, 17:39 UTC · May 3, 2021Exploit / PoC in the wildCVE-2021-2289360
Security firm SonicWall was victim of a coordinated attackSecurity Affairs·Jan 25, 08:55 UTC · Jan 25, 2021Exploit / PoC60
Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020Security Affairs·Oct 16, 10:02 UTC · Oct 16, 2020Exploit / PoCCVE-2020-513560
New VPN flaws highlight proven pathway for hackers into industrial organizationsCyberScoop·Jul 28, 18:00 UTC · Jul 28, 2020Exploit / PoC in the wild60