#VPN Security
Attackers Exploit Ivanti Connect Secure Zero-Day for Pre-Auth Command Execution
Ivanti says attackers exploited CVE-2026-104935 against a limited number of Connect Secure customers. The network-accessible authentication bypass can lead to arbitrary command execution without credentials or user interaction,...
Japan Digital Agency Breach Exposes 246,000 Records After VPN Intrusion
Attackers exploited a previously patched VPN weakness to enter Japan’s shared government IT environment, potentially exposing about 246,000 personal records. The incident highlights the continuing danger of delayed...
Gunra Ransomware Gang Turns Fortinet VPN Bugs Into a Backdoor Around MFA
A joint advisory from the FBI, CISA, NSA, and South Korean authorities warns that the Gunra ransomware operation is exploiting known Fortinet VPN flaws to sidestep multi-factor authentication...