Ransomware Gangs Exploit VPN Flaw to Defeat Multi-Factor Authentication

A high-severity flaw in Palo Alto Networks' GlobalProtect VPN software is being actively weaponized by ransomware crews to walk past multi-factor authentication and land directly inside corporate

Ivanti Patches Critical Flaw Letting Attackers Bypass Login Entirely

Ivanti has shipped fixes for a high-severity flaw in its Connect Secure appliances that allows attackers with no credentials and no user interaction to slip past authentication and run commands on