Topic: vpn vulnerabilities
-
Akira Ransomware Bypasses MFA to Breach SonicWall VPNs
Akira ransomware is bypassing multi-factor authentication on SonicWall SSL VPN devices, likely using stolen OTP seeds to generate valid tokens despite security patches. Attackers exploit the CVE-2024-40766 vulnerability to steal credentials, which they reuse even on patched systems, gaining rapid...
Read More » -
Report: Chinese hackers exploited VPN flaws to breach Ivanti customers
State-linked Chinese hackers exploited a hidden backdoor in Ivanti's Pulse Secure VPN in February 2021, compromising 119 organizations including government agencies and military contractors. The breach is linked to corporate restructuring after Ivanti's 2017 acquisition, where cost-cutting and la...
Read More » -
October 2025 Threat Report: Barracuda SOC Insights
Akira ransomware is exploiting unpatched SonicWall VPN vulnerabilities (CVE-2024-40766), bypassing multi-factor authentication through stolen credentials and encrypting data rapidly. Attackers are increasingly using Python scripts to automate and disguise malicious activities, such as deploying p...
Read More » -
Active Attacks Exploit Cisco ASA Zero-Day Flaws
A coordinated international cybersecurity alert warns of active attacks exploiting zero-day vulnerabilities in Cisco ASA and FTD software, attributed to a sophisticated, likely state-sponsored threat actor linked to previous ArcaneDoor campaigns. Two critical vulnerabilities (CVE-2025-20362 and C...
Read More » -
Ransomware, fraud, lawsuits push cyber insurance claims to record highs
The 2026 InsurSec Report from At-Bay shows a 7% year-over-year increase in overall claim frequency and an all-time high average severity of $221,000, with ransomware severity reaching $508,000, a 16% jump from the previous year. Remote access weaknesses, particularly VPN compromises, were the dom...
Read More » -
CISA Urges Fortinet Users to Patch After FortiBleed Leak
CISA has urgently called for Fortinet users to secure systems after 74,000 firewall and VPN credentials were leaked in the "FortiBleed" breach, with compromised credentials used to target government and private-sector organizations globally. The leaked data includes usernames, emails, and plainte...
Read More » -
Ransomware Attacks Now Strike in Under an Hour
Security experts warn of a dramatic acceleration in ransomware, with the Akira group completing attacks in under an hour, leaving defenders an extremely narrow response window. The group gains initial access by exploiting vulnerabilities in VPNs and backup systems without MFA, and uses credential...
Read More » -
Ransomware Gangs Shift to Data Theft as Backups Improve
Business email compromise (BEC) and funds transfer fraud now dominate cyber insurance claims, accounting for 58% of incidents, with social engineering tactics involved in 71% of fraud cases. Ransomware claims, while a smaller share, show surging financial demands with average initial ransoms exce...
Read More »