VPN
Virtual private network: remote access into the corporate network, and a common way in for attackers.
Advisories that mention this term
Exploited SonicOS SSLVPN flaw CVE-2026-19868 lets attackers sidestep SAML and MFA, now on KEV
CVE-2026-19868 in SonicWall SonicOS SSLVPN can let a user holding valid credentials for another authentication method bypass SAML authentication, and possibly the MFA that SAML enforces .
DigiCert Confirms Unauthorized Access to Internal Business System; Some Customer Contact Details and Identity Documents Potentially Exposed
Certificate authority DigiCert filed an incident report on Mozilla Bugzilla explaining that following an infrastructure migration in February 2025, an internal business system unintentionally became externally accessible, allowing an attacker to create unauthorized accounts and read certain archived customer data .
European Supermarket Refrigeration Remote Controllers Hacked; TWCERT Relays CERT-FR and International Warnings Urging Review of Internet-Connected OT
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
CISA Adds Check Point Multiple Products Vulnerability CVE-2026-85102 to Known Exploited Vulnerabilities Catalog
On 2026-09-22, CISA added CVE-2026-85102 (Check Point Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
Japan Digital Agency's shared government work environment GSS breached via VPN flaw; about 246,000 civil servant records at risk
Japan's Digital Agency said on September 11 that its Government Solution Service (GSS) was accessed without authorization: on June 25 it detected mass file access using a maintenance account, and on July 9 confirmed a third party had entered through a VPN device vulnerability .