Security News > 2024 > November > New NachoVPN attack uses rogue VPN servers to install malicious updates

2024-11-26 22:30
A set of vulnerabilities dubbed "NachoVPN" allows rogue VPN servers to install malicious updates when unpatched Palo Alto and SonicWall SSL-VPN clients connect to them. [...]
News URL
Related news
- Massive brute force attack uses 2.8 million IPs to target VPN devices (source)
- SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN (source)
- New OpenSSH flaws expose SSH servers to MiTM and DoS attacks (source)
- Toronto Zoo shares update on last year's ransomware attack (source)
- Over 37,000 VMware ESXi servers vulnerable to ongoing attacks (source)
- Ransomware gang creates tool to automate VPN brute-force attacks (source)
- Recent Windows Server 2025 updates cause Remote Desktop freezes (source)