Tag

VPN security

3 stories

Firewall Fallout: How k0t Exploited Exposed Edge Devices to Harvest 70,000+ Credentials

Security teams woke up to a coordinated campaign that systematically targeted internet-facing firewalls and VPN appliances, resulting in the exposure of more than 70,000 credentials and LDAP dumps. Researchers from Group-IB and NyxLab attribute the activity to an operator tracked as k0t (also known as CryptoFeel, Member19, and QazWsxShop). The intrusions—detected largely between February and June 2026—rely less on high-value targeting and more on mass enumeration of exposed devices, leaving…

Saugata DattaOct 23, 20264 min read148

Cybersecurity

Palo Alto GlobalProtect CVE-2026-0257: Active Exploitation and Urgent Steps for Defenders

Palo Alto Networks has warned that a recently patched authentication bypass in PAN-OS GlobalProtect, tracked as CVE-2026-0257, is now being actively exploited in the wild. The vulnerability allows attackers to bypass authentication controls and establish unauthorized VPN connections when devices are configured with specific authentication override cookie and certificate settings. Organizations running GlobalProtect should treat this as urgent: apply vendor patches, review configurations, and hunt for signs of exploitation immediately.…

Saugata DattaMay 31, 20264 min read248

Cybersecurity

Synology SSL VPN Client Flaws Let Remote Attackers Read Files and Expose PINs — Patch Now

Synology has released a security advisory addressing two important vulnerabilities in its SSL VPN Client that could allow remote attackers to access sensitive files and expose locally stored PINs. Both flaws require user interaction—specifically, visiting a crafted web page while the vulnerable client is running—but their consequences range from quietly reading configuration files and certificates to enabling interception of VPN traffic by abusing exposed credentials. Administrators and users should prioritize…

Saugata DattaApr 14, 20263 min read411

Firewall Fallout: How k0t Exploited Exposed Edge Devices to Harvest 70,000+ Credentials

Palo Alto GlobalProtect CVE-2026-0257: Active Exploitation and Urgent Steps for Defenders

Synology SSL VPN Client Flaws Let Remote Attackers Read Files and Expose PINs — Patch Now

Free Tools: IP, DNS, SSL