Ivanti fixes actively exploited vulnerability in Connect Secure
Ivanti released fixes for CVE-2026-104935 in Connect Secure after confirming limited exploitation. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog.
Tag VPN
FBI and USSS Warn of Ongoing FortiBleed Campaign Targeting Fortinet Devices
The FBI and U.S. Secret Service warn that the FortiBleed campaign continues targeting internet-exposed FortiGate firewalls and SSL VPN gateways. It is not a new vulnerability, but primarily the exploitation of leaked and weak credentials.
CISA Adds Critical Check Point VPN Flaw to Actively Exploited Vulnerabilities
CISA has added CVE-2026-85102 in Check Point devices to its Known Exploited Vulnerabilities catalog. The vendor recommends immediately deploying the hotfix available since September 9.
Possible GSS Data Leak After VPN Vulnerability Exploited in Japan
Japan’s Digital Agency is investigating the possible leak of approximately 246,000 records from the government’s GSS service after a VPN device vulnerability was exploited.
SonicWall Fixes Two Actively Exploited SMA1000 Vulnerabilities
SonicWall has released fixes for two vulnerabilities in SMA1000 devices, confirming that they are being actively exploited in the wild. Affected organizations should update their systems and check for possible signs of compromise.