Browsing Tag
VPN Security
3 posts
VPN vulnerabilities, access controls, hardening, monitoring, and incident response guidance.
Ivanti Connect Secure Zero-Day Can Evade Integrity Checks: What Admins Should Do
Attackers chained an Ivanti Connect Secure auth bypass with two other flaws for root access, then erased evidence. Here is what to patch, hunt and rotate now.
FortiBleed Lockouts Hit FortiGate Firewalls: What Admins Should Check
The FBI says FortiBleed is still compromising FortiGate gateways and locking out admins. Here are the accounts, API keys and logs to check now.
Gunra Ransomware Puts VPN Gateways and Backups on the Same Incident List
A new FBI, CISA, NSA, Secret Service, DC3, and South Korean police advisory says Gunra ransomware affiliates are abusing exposed VPN and firewall paths, stealing cloud data, dumping credentials, and deleting backups before encryption. The useful response starts with edge-device patching, identity triage, immutable backups, and log review before recovery begins.