SonicWall SSL VPN (CVE-2026-19868): exploited flaw that bypasses SAML and MFA
On SonicWall firewalls that use SAML for SSL VPN, attackers with stolen credentials could skip SAML checks — including MFA. Fixed firmware and what to do.
Read article
CySec blog
Passwords & MFA — articles and guides
All CySec articles about Passwords & MFA: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
OpenSSH “SSHole” (CVE-2026-123158): password bypass on Alpine and other musl-based Linux
A flaw in how OpenSSH handles locked accounts on musl-based systems was exploited within two days of the fix. Who is affected and what to check.
Read articlePasswords and MFA: the cheapest protection with the biggest effect
Stolen and reused passwords open the door to most account takeovers. A password manager and MFA close it.
Read articleEmail account hacked or password leaked: what to do, step by step
A calm checklist for the moment you suspect that a work account is compromised or its password appeared in a data breach.
Read articleLeast privilege: why not everyone should be an administrator
Too many access rights turn one mistake into a disaster. How to organize access to files, systems and admin rights.
Read articleHow to turn on MFA for the whole company in Microsoft 365
Security Defaults give every Microsoft 365 user multi-factor authentication in a few clicks. Step by step, with tips for a smooth rollout.
Read articleWhen an employee leaves: an IT and security checklist
Former employees with active accounts are a common and avoidable risk. A simple checklist for the last working day.
Read articleFortiOS SSL VPN (CVE-2024-21762): code execution without a password
An out-of-bounds write in the FortiGate SSL VPN let unauthenticated attackers run code, and it was exploited in the wild. Versions to install and what to do if you cannot update.
Read articleCitrix Bleed (CVE-2023-4966): stolen sessions that bypass passwords and MFA
A memory leak in NetScaler let attackers copy logged-in sessions. Why patching alone was not enough and what to do after a VPN gateway flaw.
Read articleJoomla (CVE-2023-23752): how a “medium” flaw exposed database passwords
An improper access check in Joomla 4 web service endpoints let anyone read the site configuration — including database credentials.
Read articleHiveNightmare / SeriousSAM (CVE-2021-36934): any user could read the password database
Wrong permissions on Windows registry files let normal users read password hashes through shadow copies. Installing the update alone was not enough.
Read articlePulse Secure VPN (CVE-2019-11510): stolen VPN passwords that kept working after the patch
An unauthenticated file read on Pulse Connect Secure exposed cleartext credentials. Organizations that patched but did not reset passwords stayed compromised.
Read articleLet's make your IT secure and predictable
Tell us about your infrastructure and goals. We'll get back to you within one business day with next steps.