SonicWall SSL VPN (CVE-2026-19868): exploited flaw that bypasses SAML and MFA
On SonicWall firewalls that use SAML for SSL VPN, attackers with stolen credentials could skip SAML checks — including MFA. Fixed firmware and what to do.
Read article
CySec blog
VPN & remote access — articles and guides
All CySec articles about VPN & remote access: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
How to set up a WireGuard VPN on MikroTik for remote employees
Give staff secure access to office files and 1C from home — without opening RDP or Winbox to the internet.
Read articleSecure remote work: VPN, devices and home networks
Working from home and on the road is normal now. How to give employees remote access without opening the company to attackers.
Read articleCisco ASA and FTD (CVE-2025-20333, CVE-2025-20362): zero-days in VPN firewalls
Two chained flaws in Cisco firewall VPN services were exploited before patches existed, prompting an emergency directive. What owners of Cisco ASA should check.
Read articlePalo Alto GlobalProtect (CVE-2024-3400): a maximum-severity firewall flaw
Command injection in the VPN feature of PAN-OS allowed attackers to run commands as root on the firewall itself. What to learn about edge devices.
Read articleFortiOS SSL VPN (CVE-2024-21762): code execution without a password
An out-of-bounds write in the FortiGate SSL VPN let unauthenticated attackers run code, and it was exploited in the wild. Versions to install and what to do if you cannot update.
Read articleIvanti Connect Secure (CVE-2023-46805, CVE-2024-21887): a VPN chain exploited before patches existed
Two chained flaws gave attackers full control of Ivanti VPN gateways. Why a factory reset was recommended even after patching.
Read articleCitrix Bleed (CVE-2023-4966): stolen sessions that bypass passwords and MFA
A memory leak in NetScaler let attackers copy logged-in sessions. Why patching alone was not enough and what to do after a VPN gateway flaw.
Read articleCitrix ADC and Gateway (CVE-2019-19781): when mitigation came before the patch
A path traversal in Citrix ADC let attackers run code without logging in. Patches took a month — mitigation steps were the only defence in the meantime.
Read articlePulse Secure VPN (CVE-2019-11510): stolen VPN passwords that kept working after the patch
An unauthenticated file read on Pulse Connect Secure exposed cleartext credentials. Organizations that patched but did not reset passwords stayed compromised.
Read articleLet's make your IT secure and predictable
Tell us about your infrastructure and goals. We'll get back to you within one business day with next steps.