Tag: VPN and remote access
All articles about VPN and remote access.
Actively exploited
ScreenConnect attacks on managed service providers: ConnectWise disables RMM+ extensions
Late on 11 November 2026 ConnectWise said it is investigating unauthorized access to certain partner ScreenConnect environments, mostly managed service providers (MSPs). Its working theory is that attackers abused third-party extensions from the RMM+ family, which can run remote commands, and used them to push their own remote-access clients into customer networks. ConnectWise says it has found no vulnerability in ScreenConnect itself.
Actively exploited
Ivanti Connect Secure: attackers chain three flaws to take over the VPN gateway
If your organisation uses Ivanti Connect Secure for remote access, check its version now. All three flaws in this chain are in CISA's catalog of exploited vulnerabilities, the attacks began on a gateway that was fully patched at the time, and Ivanti's own Integrity Checker missed them.
Critical
Ransomware is hitting Synology NAS devices on outdated DSM: update now
Got a Synology NAS at home or in the office? Attackers are encrypting data on devices running old DiskStation Manager (DSM) releases and demanding a ransom. They're exploiting a flaw Synology fixed back in late 2024. Check your DSM version and update.
Actively exploited
SonicWall SSLVPN CVE-2026-19868: attackers bypass SAML login and MFA
If your organisation runs SSLVPN on a SonicWall firewall with SAML sign-in, check your SonicOS version today. CISA says CVE-2026-19868 is already being exploited, and it lets an attacker with a valid password skip the SAML step – and the MFA that comes with it.