watchTowr says two unpatched NetScaler RCE flaws are being exploited and Citrix has published no fix.
A new ransomware strain enters through VPN credentials and hides behind RMM agents.
A shared platform serving 23 ministries was breached through an unpatched VPN, with disclosure coming 78 days after detection.
The VPN provider says a misconfigured internal test server gave outsiders engineering material and build credentials.
Check Point has patched two certificate-handling bugs that score 9.8 and could let an unauthenticated attacker run code.
OpenAI cuts off ChatGPT accounts running a Russian influence campaign behind a fake think tank.
Socket finds 737 VPN and proxy add-ons funneling browser sessions through a single provider.
Cisco warns an unauthenticated attacker can crash ASA and FTD firewalls with a single crafted HTTP request.