Blog
Analysis, practical know-how and news from network security – from our team to yours.
Fortinet: FortiCloud SSO flaw also hits already patched FortiGates
Via the FortiCloud login, attackers were able to log in as administrators on other organizations' FortiGates – including devices that had all the December updates installed. What CVE-2026-24858 means and what administrators should check now.
Read more
Cisco: Zero-Days in the VPN Portal Open ASA Firewalls to Attackers
Two chained zero-day vulnerabilities in the VPN web server of Cisco's ASA and FTD allow attackers to take over the firewall without credentials. Cisco attributes the attacks to the ArcaneDoor campaign, and CISA issued an emergency directive.
Read more
CitrixBleed 2: NetScaler flaw leaks session tokens and bypasses MFA
Through CVE-2025-5777, attackers can read memory from NetScaler gateways – including session tokens that let them hijack authenticated sessions, MFA included. CISA reports active exploitation.
Read more
Ivanti Connect Secure: Zero-Day Chain Opens VPN Gateways Without Authentication
Two chained zero-day vulnerabilities allow attackers to take over Ivanti VPN gateways without authentication. More than 1,700 devices have already been compromised – and a patch is still pending.
Read more