Firefox free VPN drops its 50GB monthly cap until January 31
Signed-in desktop and Android users in supported regions get unlimited in-browser VPN traffic through that date.
Stories per day · 30 days
8 RSS
Relatedconnect-secure16ivanti16zero-day12cve-2026-1049359kev8uta05767authentication-bypass5cisa5credential-theft4volexity4phishing3android2cisa-kev2critical-infrastructure2double-extortion2fortios2incident-response2privilege-escalation2
99 stories, newest first · one card per story
Stories tagged #vpn
Study maps phishing cluster aimed at German-speaking universities
Authors count 25 confirmed campus attacks from February 2022 to February 2023, affecting 5% of German universities.
Ivanti Connect Secure zero-days CVE-2026-111357 and CVE-2026-118527 exploited in the wild
Two zero-days in Ivanti Connect Secure allow local privilege escalation and remote file upload; chained with CVE-2026-104935 for unauthenticated root access; fixed in 25.1.1.3 and 22.8R2.6
1
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
Chained zero-days in Ivanti Connect Secure VPN enabled root access and data exfiltration; Volexity attributes activity to UTA0576.
2
CISA adds exploited Ivanti Connect Secure flaws to its KEV catalog
Agencies must fix CVE-2026-111357 by November 2 and CVE-2026-118527 by November 13; UTA0576 chained them with CVE-2026-104935 for root access.
6
Ivanti Connect Secure zero-days exploited for root access and credential theft
Volexity links the October chain to UTA0576; Ivanti says few customers were hit and fixed builds are 25.1.1.3 and 22.8R2.6.
3
Ivanti Connect Secure zero-days chained for unauthenticated root
Fixes are 25.1.1.3 and 22.8R2.6 after UTA0576 hit a fully patched 22.8R2.4 appliance.
8
Cisco patches actively exploited ASA and FTD VPN crash flaw
CVE-2026-76418, scored 8.6, lets unauthenticated attackers reload firewalls when SSL VPN uses secondary authentication.
LevelBlue: vulnerability exploitation rose to 14% of initial access
The firm's Q1 figure was 20%, while Verizon's 2026 DBIR put exploitation behind 31% of breaches.
1
FortiBleed 2.0 finds 40,573 cleartext secrets in exposed FortiGate configs
The follow-up is stolen configuration files, not a new Fortinet flaw, and the records are not confirmed still valid.
AI-assisted intruders target Japanese firms and steal credentials
TrendAI reconstructed three infrastructures; the deepest access used exposed admin panels and stolen or default credentials.
1
eMudhra issued TLS certificates with private keys of 3 to 8 bits
Eight P-384 keys held only a handful of bits of entropy, so a network attacker could impersonate the certificate holder.
FBI and CISA warn SafePay hit at least 600 organizations
The independent group uses stolen or brute-forced credentials and VPN access, then steals data and appends .SafePay.
2
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
Since August 2024 the private group has used stolen or brute-forced credentials, VPN access, phishing, and edge-device flaws, then double-extorted victims.
Akamai post urges agencies to move past legacy VPNs
The October 20 post frames hybrid-work hardware load and aging VPNs as reasons for public-sector access changes, without incident details.
1
Tor Project recounts building Tor VPN Beta for Android
Each app gets its own Tor circuit, and WebTunnel bridges arrived in 1.4.0 beta after censored-region use reshaped the product.
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
Unit 42 says CL-STA-0954 used Fortinet flaws to deploy memory-resident PEERSTITCH against a telecom provider.
13
CVE-2026-104935 | Ivanti Connect Secure Authentication Bypass and Remote Code Execution Vulnerability
Actively exploited Ivanti Connect Secure flaw CVE-2026-104935 lets unauthenticated attackers bypass authentication and run commands.
10
Russia Is Tightening Internet Controls, Leading to Operational Risks
Insikt Group says Russia’s expanding VPN blocks, shutdowns, and surveillance raise operational and sanctions risks without full internet isolation.
10
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
Attackers exploited Ivanti Connect Secure zero-day CVE-2026-104935 for unauthenticated remote code execution.
4
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Ivanti patched Connect Secure zero-day CVE-2026-104935 after UTA0576 used it for remote command execution.
3
Hackers abuse the Ivanti Connect Secure bug to gain access without accounts
Attackers exploited Ivanti Connect Secure CVE-2026-104935 to bypass login and run commands; CISA added it to KEV.
4
Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities
Volexity found UTA0576 chaining three Ivanti Connect Secure zero-days for unauthenticated root and credential theft.
3
Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in Chained Attacks
Ivanti patched CVE-2026-104935 after UTA0576 chained flaws to root on Connect Secure VPN appliances.
5