Blog
Analysis, practical know-how and news from network security – from our team to yours.
SonicWall: SSL VPN Flaw Bypasses MFA
CVE-2026-19868 allows logins to SonicWall SSL VPN without the multi-factor authentication enforced via SAML – and it is already being actively exploited. What is affected, what to do now, and why protection starts in front of the firewall.
Read more
SkyW4lker: The Phishing Kit That Bypasses MFA in Microsoft 365
More than 600 attacks since June: SkyW4lker tricks victims into entering a device code on the genuine Microsoft page – and takes over accounts despite multi-factor authentication.
Read more
Hacked Refrigeration Systems: When Supermarket Freezers Turn into Heaters
Attackers used the internet to heat up the refrigeration systems of hundreds of supermarkets across Europe. What lies behind the attacks and how operators of operational technology can protect themselves.
Read more
CVE-2026-98432: Critical Vulnerability in the Linux Kernel TCP Stack
A use-after-free in the IPv4 TCP code can be triggered over the network without authentication and has been present in the kernel since Linux 4.4. Here is how to protect your servers.
Read more
ConnectWise Supply Chain Attack: 2,250 Microsoft 365 Tenants Targeted
Using stolen app credentials and AI agents, Storm-0940 accessed Microsoft 365 environments via ConnectWise – without user sign-in and without MFA.
Read more
PHP2Shell: Critical PHP Vulnerabilities Under Active Exploitation
Two memory corruption bugs in the PHP core allow unauthenticated code execution. Patches are available, and so are exploits – here is what operators of PHP applications should do now.
Read more
Microsoft 365 and OneDrive offline: lessons from the 2026 outages
A faulty update and a central authentication configuration brought down Exchange Online, OneDrive, SharePoint and Teams. How organizations can prepare for cloud outages.
Read more
Check Point VPN: Login Without a Password via Deprecated IKEv1
A vulnerability in the deprecated IKEv1 protocol allows VPN connections to Check Point gateways without a valid password. Attacks have been under way since May, and at least one has been traced to a Qilin ransomware affiliate.
Read more
Palo Alto: GlobalProtect Flaw Opens the VPN Without Authentication
With forged authentication override cookies, attackers can establish a VPN session without a password or MFA on certain GlobalProtect configurations. The flaw has been actively exploited since mid-May: what is affected and what to do now.
Read more