Curated security research, vulnerabilities, advisories and tools for practitioners.

#vpn

Security coverage tagged vpn.

1.

Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)

vulnerability | 2026-09-30 22:00 | CVE-2026-10739 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #exploit

2.

Solving an ORB mystery

research | 2026-08-09 00:00 | lab.ctbb.show | Original ↗ | .md | #network-security | #wireguard | #vpn

3.

When Your VPN Opens Your Private Network to the Public

blog | 2026-05-20 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #cloud | #reverse-engineering

4.

strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication

vulnerability | High | 2026-03-26 00:00 | CVE-2026-25075 | bishopfox.com | Original ↗ | .md | #vulnerability-research | #denial-of-service | #integer-underflow

5.

Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN

vulnerability | 2025-06-24 12:00 | CVE-2025-0133 | xbow.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #xss

6.

CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

vulnerability | 2025-05-28 00:00 | netspi.com | Original ↗ | .md | #windows | #lpe | #vpn

7.

Chiến dịch tấn công mới của nhóm Lotus Blossom: Kỹ thuật Domain Fronting và Lợi dụng các hệ thống quản trị tập trung (Phần 1)

blog | 2025-03-20 04:12 | blog.viettelcybersecurity.com | Original ↗ | .md | #phishing | #apt | #vpn

8.

Lotus Blossom's New Attack Campaign: Domain Fronting and Abusing Centralized Domain Management (Part 1)

blog | 2025-03-20 03:40 | blog.viettelcybersecurity.com | Original ↗ | .md | #phishing | #apt | #vpn

9.

CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild

vulnerability | 2025-01-09 14:23 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #vpn

10.

How to build a secure recon network using Tailscale

blog | 2024-09-17 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #cloud | #reconnaissance

11.

Cloudflare Tunnel & Ngrok Alternative: Entra Application Proxy Guide

research | 2024-05-04 06:09 | projectblack.io | Original ↗ | .md | #vpn | #zero-trust | #ztna

12.

Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know

blog | 2024-02-06 16:06 | wiz.io | Original ↗ | .md | #cisa | #vulnerability | #vpn

13.

Security Flash: CISA Order to Disconnect Ivanti Products

blog | 2024-02-02 07:25 | bugcrowd.com | Original ↗ | .md | #zero-day | #cisa | #exploitation

14.

[CVE-2024-21887] Ivanti Connect Secure VPN Exploitation: New Observations

vulnerability | 2024-01-18 13:55 | CVE-2024-21887 | volexity.com | Original ↗ | .md | #rce | #vulnerability-research | #threat-intelligence

15.

[CVE-2023-46805] Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN

vulnerability | 2024-01-10 14:00 | CVE-2023-46805 | volexity.com | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

16.

Important Trends Among Masked Identities

blog | 2022-06-14 00:00 | netspi.com | Original ↗ | .md | #cloud | #threat-intelligence | #network-security

17.

eCatcher Desktop, Version 6.6.4 Advisory

vulnerability | 2021-08-17 00:00 | CVE-2021-33214 | bishopfox.com | Original ↗ | .md | #privilege-escalation | #vulnerability | #advisory

18.

Ransomware Resiliency 101

incident | 2021-06-29 00:00 | netspi.com | Original ↗ | .md | #ransomware | #vpn | #ot-security

19.

ZwinK’s Tips and Tricks to Crush Bug Bounty #4 & #5

blog | 2021-06-22 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #burp-suite | #waf

20.

Winston Privacy Version 1.5.4

blog | 2020-10-27 00:00 | bishopfox.com | Original ↗ | .md | #advisory | #vpn | #csrf

21.

COVID-19: Evaluating Security Implications of the Decisions Made to Enable a Remote Workforce

blog | 2020-06-23 00:00 | netspi.com | Original ↗ | .md | #risk-management | #vpn | #remote-work

22.

A Closer Look at the US-CERT Top 10 Vulnerabilities List

blog | 2020-05-21 00:00 | bishopfox.com | Original ↗ | .md | #vulnerability-management | #social-engineering | #vpn

23.

Keeping Your Organization Secure While Sending Your Employees to Work from Home

blog | 2020-03-25 00:00 | netspi.com | Original ↗ | .md | #endpoint-security | #phishing | #vpn

24.

How to Keep Your Business Secure During the COVID-19 Pandemic

blog | 2020-03-17 00:00 | bishopfox.com | Original ↗ | .md | #endpoint-security | #vpn | #remote-work

25.

Leading Financial Institution Leveraged NetSPI Red Team Service to Improve Their Security Posture

blog | 2019-11-01 00:00 | netspi.com | Original ↗ | .md | #osint | #red-team | #social-engineering

26.

Kali Linux 2018.4 Release

blog | 2018-10-29 00:00 | kali.org | Original ↗ | .md | #kali-linux | #release-notes | #raspberry-pi

27.

PureVPN Tasks Bugcrowd for Greater Assurance of User Security

blog | 2018-09-27 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #privacy | #vpn

28.

WireGuard on Kali

blog | 2018-09-11 00:00 | kali.org | Original ↗ | .md | #kali-linux | #networking | #wireguard

29.

New Feature: Traffic Control Provides Unprecedented Coverage and Control for Crowdsourced Security Testing

blog | 2017-12-19 00:00 | bugcrowd.com | Original ↗ | .md | #vpn | #bugcrowd | #crowdsourced-security

30.

A Guide to Choosing the Right VPN

blog | 2017-04-06 00:00 | bishopfox.com | Original ↗ | .md | #privacy | #vpn | #encryption