#sslvpn — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #sslvpn, aggregated by home.social.
-
Microsoft tries to sell their #vpn called #sse and at the same time they block #wireguard development, got me thinking:
Seriously they don’t use wireguard in SSE? Why the fuck not? They seriously think they can built a better one? Look what happened to #Pulse and all the other #SSLVPN failures. -
Microsoft tries to sell their #vpn called #sse and at the same time they block #wireguard development, got me thinking:
Seriously they don’t use wireguard in SSE? Why the fuck not? They seriously think they can built a better one? Look what happened to #Pulse and all the other #SSLVPN failures. -
Краткий взгляд на UserGate SSL VPN портал
Современные требования к ИБ диктуют необходимость предоставления сотрудникам защищенного доступа к корпоративным сервисам без потери уровня контроля, удобства и производительности, при этом следуя пути импортозамещения. UserGate NGFW реализует функцию SSL VPN портала (Веб-портал) , которая позволяет осуществлять доступ ко внутренним FTP-, RDP-, SSH- и Web-серверам используя только браузер, не требуя установки специализированного ПО в операционной системе. Данный материал представляет собой небольшой обзор компонента: от его настройки до нюансов, обнаруженных в ходе его эксплуатации. Читать
-
Краткий взгляд на UserGate SSL VPN портал
Современные требования к ИБ диктуют необходимость предоставления сотрудникам защищенного доступа к корпоративным сервисам без потери уровня контроля, удобства и производительности, при этом следуя пути импортозамещения. UserGate NGFW реализует функцию SSL VPN портала (Веб-портал) , которая позволяет осуществлять доступ ко внутренним FTP-, RDP-, SSH- и Web-серверам используя только браузер, не требуя установки специализированного ПО в операционной системе. Данный материал представляет собой небольшой обзор компонента: от его настройки до нюансов, обнаруженных в ходе его эксплуатации. Читать
-
Краткий взгляд на UserGate SSL VPN портал
Современные требования к ИБ диктуют необходимость предоставления сотрудникам защищенного доступа к корпоративным сервисам без потери уровня контроля, удобства и производительности, при этом следуя пути импортозамещения. UserGate NGFW реализует функцию SSL VPN портала (Веб-портал) , которая позволяет осуществлять доступ ко внутренним FTP-, RDP-, SSH- и Web-серверам используя только браузер, не требуя установки специализированного ПО в операционной системе. Данный материал представляет собой небольшой обзор компонента: от его настройки до нюансов, обнаруженных в ходе его эксплуатации. Читать
-
https://www.fortiguard.com/psirt/FG-IR-25-934
FortiGate SSLVPN vuln CVE-2025-68686
(Not) rated highly yet. However, I would promptly patch it (and quickly move away from SSL VPN, regardless of the vendor; instead use IKEv2 EAP-TLS or WireGuard). I think this one might rapidly elevate to a RCE
-
https://www.fortiguard.com/psirt/FG-IR-25-934
FortiGate SSLVPN vuln CVE-2025-68686
(Not) rated highly yet. However, I would promptly patch it (and quickly move away from SSL VPN, regardless of the vendor; instead use IKEv2 EAP-TLS or WireGuard). I think this one might rapidly elevate to a RCE
-
SonicWall-VPN-Einbruch: Angreifer deaktivieren EDR über Kernel-Ebene mit widerrufenen Treibern
Die Angreifer verschafften sich im Februar 2026 Zugang zum Zielnetzwerk über gestohlene SonicWall-SSLVPN-Anmeldedaten.
-
Meine aktuelle private #QNAP #NAS Baustelle:
• #SSLVPN (TCP 443) mit #OpenVPN (#QVPN App)
• Interne CA für .internal (#OpenSSL)
• #PiHole (Docker) für .internal DNS A Records
• Reverse-Proxy #Caddy (Docker) für HTTPS
• #Vaultwarden (Docker)
• #FreshRSS (Docker)Für den sehr sporadischen Dateizugriff verwende ich die Qfile-App.
Nur das SSL-VPN ist aus dem Internet erreichbar.
Weitere #Docker Ideen:
• Nextcloud (wenn Qfile nicht ausreicht)
• Paperless NGX -
Meine aktuelle private #QNAP #NAS Baustelle:
• #SSLVPN (TCP 443) mit #OpenVPN (#QVPN App)
• Interne CA für .internal (#OpenSSL)
• #PiHole (Docker) für .internal DNS A Records
• Reverse-Proxy #Caddy (Docker) für HTTPS
• #Vaultwarden (Docker)
• #FreshRSS (Docker)Für den sehr sporadischen Dateizugriff verwende ich die Qfile-App.
Nur das SSL-VPN ist aus dem Internet erreichbar.
Weitere #Docker Ideen:
• Nextcloud (wenn Qfile nicht ausreicht)
• Paperless NGX -
Fortinet confirms active exploitation of CVE-2020-12812.
A long-standing FortiOS SSL VPN flaw can bypass 2FA due to username case-sensitivity mismatches - especially in legacy deployments.https://www.technadu.com/fortinet-warns-july-disclosed-ssl-vpn-flaw-is-being-used-to-bypass/616801/
Thoughts on mitigating MFA bypass risks?
-
Fortinet confirms active exploitation of CVE-2020-12812.
A long-standing FortiOS SSL VPN flaw can bypass 2FA due to username case-sensitivity mismatches - especially in legacy deployments.https://www.technadu.com/fortinet-warns-july-disclosed-ssl-vpn-flaw-is-being-used-to-bypass/616801/
Thoughts on mitigating MFA bypass risks?
-
Fortinet confirms active exploitation of CVE-2020-12812.
A long-standing FortiOS SSL VPN flaw can bypass 2FA due to username case-sensitivity mismatches - especially in legacy deployments.https://www.technadu.com/fortinet-warns-july-disclosed-ssl-vpn-flaw-is-being-used-to-bypass/616801/
Thoughts on mitigating MFA bypass risks?
-
Fortinet confirms active exploitation of CVE-2020-12812.
A long-standing FortiOS SSL VPN flaw can bypass 2FA due to username case-sensitivity mismatches - especially in legacy deployments.https://www.technadu.com/fortinet-warns-july-disclosed-ssl-vpn-flaw-is-being-used-to-bypass/616801/
Thoughts on mitigating MFA bypass risks?
-
Is your enterprise VPN stuck in the SSL era? 🦖
We unpacked the mechanics behind common issues like TCP meltdown, DTLS fallback, and mobility struggles in our new guide.
See why the transport protocol matters and what a modern, WireGuard-based alternative looks like in practice:
https://defguard.net/blog/ssl-vpn-performance-protocol-problem/
-
Is your enterprise VPN stuck in the SSL era? 🦖
We unpacked the mechanics behind common issues like TCP meltdown, DTLS fallback, and mobility struggles in our new guide.
See why the transport protocol matters and what a modern, WireGuard-based alternative looks like in practice:
https://defguard.net/blog/ssl-vpn-performance-protocol-problem/
-
Is your enterprise VPN stuck in the SSL era? 🦖
We unpacked the mechanics behind common issues like TCP meltdown, DTLS fallback, and mobility struggles in our new guide.
See why the transport protocol matters and what a modern, WireGuard-based alternative looks like in practice:
https://defguard.net/blog/ssl-vpn-performance-protocol-problem/
-
Is your enterprise VPN stuck in the SSL era? 🦖
We unpacked the mechanics behind common issues like TCP meltdown, DTLS fallback, and mobility struggles in our new guide.
See why the transport protocol matters and what a modern, WireGuard-based alternative looks like in practice:
https://defguard.net/blog/ssl-vpn-performance-protocol-problem/
-
SonicWall SSL VPN Accounts in Attacker Crosshairs https://www.securityweek.com/sonicwall-ssl-vpn-accounts-in-attacker-crosshairs/ #Malware&Threats #SonicWall #SSLVPN
-
SonicWall SSL VPN Accounts in Attacker Crosshairs https://www.securityweek.com/sonicwall-ssl-vpn-accounts-in-attacker-crosshairs/ #Malware&Threats #SonicWall #SSLVPN
-
SonicWall SSL VPN Accounts in Attacker Crosshairs https://www.securityweek.com/sonicwall-ssl-vpn-accounts-in-attacker-crosshairs/ #Malware&Threats #SonicWall #SSLVPN
-
SonicWall SSL VPN Accounts in Attacker Crosshairs https://www.securityweek.com/sonicwall-ssl-vpn-accounts-in-attacker-crosshairs/ #Malware&Threats #SonicWall #SSLVPN
-
Campaign #compromising #SonicWall #SSLVPN instances since October 4, 2025 (100 infections in 16 organizations known as of October 10). There is a suspicion, that the firewalls created cloud backups itself - without admin approval.
https://borncity.com/win/2025/10/12/sonicwall-sslvpn-sicherheitslucken-breit-ausgenutzt/
-
Campaign #compromising #SonicWall #SSLVPN instances since October 4, 2025 (100 infections in 16 organizations known as of October 10). There is a suspicion, that the firewalls created cloud backups itself - without admin approval.
https://borncity.com/win/2025/10/12/sonicwall-sslvpn-sicherheitslucken-breit-ausgenutzt/
-
Campaign #compromising #SonicWall #SSLVPN instances since October 4, 2025 (100 infections in 16 organizations known as of October 10). There is a suspicion, that the firewalls created cloud backups itself - without admin approval.
https://borncity.com/win/2025/10/12/sonicwall-sslvpn-sicherheitslucken-breit-ausgenutzt/
-
Campaign #compromising #SonicWall #SSLVPN instances since October 4, 2025 (100 infections in 16 organizations known as of October 10). There is a suspicion, that the firewalls created cloud backups itself - without admin approval.
https://borncity.com/win/2025/10/12/sonicwall-sslvpn-sicherheitslucken-breit-ausgenutzt/
-
Campaign #compromising #SonicWall #SSLVPN instances since October 4, 2025 (100 infections in 16 organizations known as of October 10). There is a suspicion, that the firewalls created cloud backups itself - without admin approval.
https://borncity.com/win/2025/10/12/sonicwall-sslvpn-sicherheitslucken-breit-ausgenutzt/
-
🚨 New: Ukrainian network FDN3 (AS211736) linked to mass brute-force + password spraying on SSL VPN & RDP devices.
🔎 Findings:
✔️ Overlaps with/ Seychelles bulletproof ASNs
✔️ Prefixes tied to Russian & spam networks
✔️ Likely feeding RaaS crews like Black Basta
💬 Should defenders push harder for ASN-level blocking?
👉 Follow @technadu for daily cyber intel.#FDN3 #BruteForceAttack #SSLVPN #RDP #Cybersecurity #Botnet #Ukraine #Intrinsec
-
🚨 New: Ukrainian network FDN3 (AS211736) linked to mass brute-force + password spraying on SSL VPN & RDP devices.
🔎 Findings:
✔️ Overlaps with/ Seychelles bulletproof ASNs
✔️ Prefixes tied to Russian & spam networks
✔️ Likely feeding RaaS crews like Black Basta
💬 Should defenders push harder for ASN-level blocking?
👉 Follow @technadu for daily cyber intel.#FDN3 #BruteForceAttack #SSLVPN #RDP #Cybersecurity #Botnet #Ukraine #Intrinsec
-
Australian Businesses at Risk as Threat Actors Exploit Fortinet Vulnerabilities https://thecyberexpress.com/fortinet-urges-australia-to-patch-now/ #AustralianCyberSecurityCentre #CybersecurityBestPractices #TheCyberExpressNews #VulnerabilityNews #Fortinetproducts #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Features #Fortinet #SSLVPN
-
Australian Businesses at Risk as Threat Actors Exploit Fortinet Vulnerabilities https://thecyberexpress.com/fortinet-urges-australia-to-patch-now/ #AustralianCyberSecurityCentre #CybersecurityBestPractices #TheCyberExpressNews #VulnerabilityNews #Fortinetproducts #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Features #Fortinet #SSLVPN
-
Australian Businesses at Risk as Threat Actors Exploit Fortinet Vulnerabilities https://thecyberexpress.com/fortinet-urges-australia-to-patch-now/ #AustralianCyberSecurityCentre #CybersecurityBestPractices #TheCyberExpressNews #VulnerabilityNews #Fortinetproducts #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Features #Fortinet #SSLVPN
-
Australian Businesses at Risk as Threat Actors Exploit Fortinet Vulnerabilities https://thecyberexpress.com/fortinet-urges-australia-to-patch-now/ #AustralianCyberSecurityCentre #CybersecurityBestPractices #TheCyberExpressNews #VulnerabilityNews #Fortinetproducts #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Features #Fortinet #SSLVPN
-
Kann mich jemand unterstützen bei der Installation von #Fortigate #FortiClient #SSLVPN unter #Ubuntu 24 LTS. Der Client läuft, die Config ist auch klar, aber die einzige Meldung die ich beim connecten kriege ist "Login canceled".
-
Absurdalnie prosta do wykorzystania krytyczna podatność w urządzeniach od Palo Alto (unauth RCE jako root). Luka jest już wykorzystywana przez atakujących.
Kolejne zaskakująco proste podatności w PAN-OS są używane przez zewnętrznych aktorów. Badacze z grupy WatchTowr sprawdzili, jakich metod używają przestępcy oraz jakie środki zaradcze podjął producent.
#WBiegu #Authbypass #Paloalto #Privesc #Sslvpn #Unauthrce #Websec
-
Absurdalnie prosta do wykorzystania krytyczna podatność w urządzeniach od Palo Alto (unauth RCE jako root). Luka jest już wykorzystywana przez atakujących.
Kolejne zaskakująco proste podatności w PAN-OS są używane przez zewnętrznych aktorów. Badacze z grupy WatchTowr sprawdzili, jakich metod używają przestępcy oraz jakie środki zaradcze podjął producent.
#WBiegu #Authbypass #Paloalto #Privesc #Sslvpn #Unauthrce #Websec
-
Absurdalnie prosta do wykorzystania krytyczna podatność w urządzeniach od Palo Alto (unauth RCE jako root). Luka jest już wykorzystywana przez atakujących.
Kolejne zaskakująco proste podatności w PAN-OS są używane przez zewnętrznych aktorów. Badacze z grupy WatchTowr sprawdzili, jakich metod używają przestępcy oraz jakie środki zaradcze podjął producent.
#WBiegu #Authbypass #Paloalto #Privesc #Sslvpn #Unauthrce #Websec
-
Absurdalnie prosta do wykorzystania krytyczna podatność w urządzeniach od Palo Alto (unauth RCE jako root). Luka jest już wykorzystywana przez atakujących.
Kolejne zaskakująco proste podatności w PAN-OS są używane przez zewnętrznych aktorów. Badacze z grupy WatchTowr sprawdzili, jakich metod używają przestępcy oraz jakie środki zaradcze podjął producent.
#WBiegu #Authbypass #Paloalto #Privesc #Sslvpn #Unauthrce #Websec
-
⚠️ SonicWall a mis à jour son avis de sécurité concernant la vulnérabilité CVE-2024-40766, ajoutant que l’interface #SSLVPN pourrait également être impactée. Ils signalent aussi des signes d’exploitation potentielle sur internet. Si vous administrez un de ces modèles, Il est essentiel de sécuriser ces systèmes rapidement pour éviter toute exploitation malveillante
⬇️
"SonicOS Improper Access Control Vulnerability"
👇
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015"SonicWall updated its advisory on Friday to inform customers that “this vulnerability is potentially being exploited in the wild”
👇
https://www.securityweek.com/recent-sonicwall-firewall-vulnerability-potentially-exploited-in-the-wild/ -
⚠️ SonicWall a mis à jour son avis de sécurité concernant la vulnérabilité CVE-2024-40766, ajoutant que l’interface #SSLVPN pourrait également être impactée. Ils signalent aussi des signes d’exploitation potentielle sur internet. Si vous administrez un de ces modèles, Il est essentiel de sécuriser ces systèmes rapidement pour éviter toute exploitation malveillante
⬇️
"SonicOS Improper Access Control Vulnerability"
👇
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015"SonicWall updated its advisory on Friday to inform customers that “this vulnerability is potentially being exploited in the wild”
👇
https://www.securityweek.com/recent-sonicwall-firewall-vulnerability-potentially-exploited-in-the-wild/ -
⚠️ SonicWall a mis à jour son avis de sécurité concernant la vulnérabilité CVE-2024-40766, ajoutant que l’interface #SSLVPN pourrait également être impactée. Ils signalent aussi des signes d’exploitation potentielle sur internet. Si vous administrez un de ces modèles, Il est essentiel de sécuriser ces systèmes rapidement pour éviter toute exploitation malveillante
⬇️
"SonicOS Improper Access Control Vulnerability"
👇
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015"SonicWall updated its advisory on Friday to inform customers that “this vulnerability is potentially being exploited in the wild”
👇
https://www.securityweek.com/recent-sonicwall-firewall-vulnerability-potentially-exploited-in-the-wild/ -
⚠️ SonicWall a mis à jour son avis de sécurité concernant la vulnérabilité CVE-2024-40766, ajoutant que l’interface #SSLVPN pourrait également être impactée. Ils signalent aussi des signes d’exploitation potentielle sur internet. Si vous administrez un de ces modèles, Il est essentiel de sécuriser ces systèmes rapidement pour éviter toute exploitation malveillante
⬇️
"SonicOS Improper Access Control Vulnerability"
👇
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015"SonicWall updated its advisory on Friday to inform customers that “this vulnerability is potentially being exploited in the wild”
👇
https://www.securityweek.com/recent-sonicwall-firewall-vulnerability-potentially-exploited-in-the-wild/ -
Fortinet SSL VPN Exploit Up for Sale on Dark Web https://thecyberexpress.com/cve-2024-21762-exploit-sale/ #CVE202421762ExploitSale #remotecodeexecution #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202421762 #FortiProxy #FortiOS #SSLVPN
-
Fortinet SSL VPN Exploit Up for Sale on Dark Web https://thecyberexpress.com/cve-2024-21762-exploit-sale/ #CVE202421762ExploitSale #remotecodeexecution #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202421762 #FortiProxy #FortiOS #SSLVPN
-
Fortinet SSL VPN Exploit Up for Sale on Dark Web https://thecyberexpress.com/cve-2024-21762-exploit-sale/ #CVE202421762ExploitSale #remotecodeexecution #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202421762 #FortiProxy #FortiOS #SSLVPN
-
Fortinet SSL VPN Exploit Up for Sale on Dark Web https://thecyberexpress.com/cve-2024-21762-exploit-sale/ #CVE202421762ExploitSale #remotecodeexecution #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202421762 #FortiProxy #FortiOS #SSLVPN
-
Security researchers reveal attackers are actively exploiting a vulnerability in the SSL VPN feature in Fortinet FortiOS. The vulnerability is tracked as CVE-2024-21762, and when exploited, can allow an attacker to execute code remotely. Administrators are advised to patch ASAP.
-
Security researchers reveal attackers are actively exploiting a vulnerability in the SSL VPN feature in Fortinet FortiOS. The vulnerability is tracked as CVE-2024-21762, and when exploited, can allow an attacker to execute code remotely. Administrators are advised to patch ASAP.
-
Security researchers reveal attackers are actively exploiting a vulnerability in the SSL VPN feature in Fortinet FortiOS. The vulnerability is tracked as CVE-2024-21762, and when exploited, can allow an attacker to execute code remotely. Administrators are advised to patch ASAP.
-
Security researchers reveal attackers are actively exploiting a vulnerability in the SSL VPN feature in Fortinet FortiOS. The vulnerability is tracked as CVE-2024-21762, and when exploited, can allow an attacker to execute code remotely. Administrators are advised to patch ASAP.
-
"🚨 #FortinetFlaw Alert! RCE Vulnerability in SSL VPN - Act Now! 🚨"
Fortinet's SSL VPN is in the spotlight due to a newly discovered RCE vulnerability, potentially exploited in recent attacks due to the existence of an exploit being publicly available. Identified as CVE-2022-40684 (FG-IR-24-015) (Critical/9.8 rating), this flaw allows unauthenticated attackers to execute arbitrary code. Upgrading to version 6.2.16, 6.4.15, 7.0.14, 7.2.7 or 7.4.3 eliminates this vulnerability. Security researchers urge immediate patching as exploits are likely circulating. 🛡️💻🔐
#CyberSecurity #RCE #Fortinet #Vulnerability #PatchNow #InfoSec #SSLVPN #Exploit
Source: BleepingComputer, Tenable
Tags: #CVE2022-40684 #FORTIOS #SecurityUpdate #Mitigation #InfoSecCommunity #CyberThreats #FGIR24015
-
"🚨 #FortinetFlaw Alert! RCE Vulnerability in SSL VPN - Act Now! 🚨"
Fortinet's SSL VPN is in the spotlight due to a newly discovered RCE vulnerability, potentially exploited in recent attacks due to the existence of an exploit being publicly available. Identified as CVE-2022-40684 (FG-IR-24-015) (Critical/9.8 rating), this flaw allows unauthenticated attackers to execute arbitrary code. Upgrading to version 6.2.16, 6.4.15, 7.0.14, 7.2.7 or 7.4.3 eliminates this vulnerability. Security researchers urge immediate patching as exploits are likely circulating. 🛡️💻🔐
#CyberSecurity #RCE #Fortinet #Vulnerability #PatchNow #InfoSec #SSLVPN #Exploit
Source: BleepingComputer, Tenable
Tags: #CVE2022-40684 #FORTIOS #SecurityUpdate #Mitigation #InfoSecCommunity #CyberThreats #FGIR24015
-
"🚨 #FortinetFlaw Alert! RCE Vulnerability in SSL VPN - Act Now! 🚨"
Fortinet's SSL VPN is in the spotlight due to a newly discovered RCE vulnerability, potentially exploited in recent attacks due to the existence of an exploit being publicly available. Identified as CVE-2022-40684 (FG-IR-24-015) (Critical/9.8 rating), this flaw allows unauthenticated attackers to execute arbitrary code. Upgrading to version 6.2.16, 6.4.15, 7.0.14, 7.2.7 or 7.4.3 eliminates this vulnerability. Security researchers urge immediate patching as exploits are likely circulating. 🛡️💻🔐
#CyberSecurity #RCE #Fortinet #Vulnerability #PatchNow #InfoSec #SSLVPN #Exploit
Source: BleepingComputer, Tenable
Tags: #CVE2022-40684 #FORTIOS #SecurityUpdate #Mitigation #InfoSecCommunity #CyberThreats #FGIR24015
-
"🚨 #FortinetFlaw Alert! RCE Vulnerability in SSL VPN - Act Now! 🚨"
Fortinet's SSL VPN is in the spotlight due to a newly discovered RCE vulnerability, potentially exploited in recent attacks due to the existence of an exploit being publicly available. Identified as CVE-2022-40684 (FG-IR-24-015) (Critical/9.8 rating), this flaw allows unauthenticated attackers to execute arbitrary code. Upgrading to version 6.2.16, 6.4.15, 7.0.14, 7.2.7 or 7.4.3 eliminates this vulnerability. Security researchers urge immediate patching as exploits are likely circulating. 🛡️💻🔐
#CyberSecurity #RCE #Fortinet #Vulnerability #PatchNow #InfoSec #SSLVPN #Exploit
Source: BleepingComputer, Tenable
Tags: #CVE2022-40684 #FORTIOS #SecurityUpdate #Mitigation #InfoSecCommunity #CyberThreats #FGIR24015
-
"🚨 #FortinetFlaw Alert! RCE Vulnerability in SSL VPN - Act Now! 🚨"
Fortinet's SSL VPN is in the spotlight due to a newly discovered RCE vulnerability, potentially exploited in recent attacks due to the existence of an exploit being publicly available. Identified as CVE-2022-40684 (FG-IR-24-015) (Critical/9.8 rating), this flaw allows unauthenticated attackers to execute arbitrary code. Upgrading to version 6.2.16, 6.4.15, 7.0.14, 7.2.7 or 7.4.3 eliminates this vulnerability. Security researchers urge immediate patching as exploits are likely circulating. 🛡️💻🔐
#CyberSecurity #RCE #Fortinet #Vulnerability #PatchNow #InfoSec #SSLVPN #Exploit
Source: BleepingComputer, Tenable
Tags: #CVE2022-40684 #FORTIOS #SecurityUpdate #Mitigation #InfoSecCommunity #CyberThreats #FGIR24015
-
True facts. AFAICT, the #Ivanti mess is technical-debt chickens coming home to roost. I was at #NetScreen when we acquired #Neoteris (originators of the #SSLVPN product), and then over the next two decades #Juniper > #PulseSecure > #Ivanti have tortured that legacy codebase with everything from FrankenNAC to PE-driven developer offshoring to bolt-on cloud-service offerings. TBH the only thing that surprises me about this is that it took so long.
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago... -
True facts. AFAICT, the #Ivanti mess is technical-debt chickens coming home to roost. I was at #NetScreen when we acquired #Neoteris (originators of the #SSLVPN product), and then over the next two decades #Juniper > #PulseSecure > #Ivanti have tortured that legacy codebase with everything from FrankenNAC to PE-driven developer offshoring to bolt-on cloud-service offerings. TBH the only thing that surprises me about this is that it took so long.
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago... -
True facts. AFAICT, the #Ivanti mess is technical-debt chickens coming home to roost. I was at #NetScreen when we acquired #Neoteris (originators of the #SSLVPN product), and then over the next two decades #Juniper > #PulseSecure > #Ivanti have tortured that legacy codebase with everything from FrankenNAC to PE-driven developer offshoring to bolt-on cloud-service offerings. TBH the only thing that surprises me about this is that it took so long.
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago... -
True facts. AFAICT, the #Ivanti mess is technical-debt chickens coming home to roost. I was at #NetScreen when we acquired #Neoteris (originators of the #SSLVPN product), and then over the next two decades #Juniper > #PulseSecure > #Ivanti have tortured that legacy codebase with everything from FrankenNAC to PE-driven developer offshoring to bolt-on cloud-service offerings. TBH the only thing that surprises me about this is that it took so long.
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago... -
True facts. AFAICT, the #Ivanti mess is technical-debt chickens coming home to roost. I was at #NetScreen when we acquired #Neoteris (originators of the #SSLVPN product), and then over the next two decades #Juniper > #PulseSecure > #Ivanti have tortured that legacy codebase with everything from FrankenNAC to PE-driven developer offshoring to bolt-on cloud-service offerings. TBH the only thing that surprises me about this is that it took so long.
Pouring one out for what was truly a revolutionary #VPN solution when it debuted 20-some years ago...