Virtual private network is a network security service that uses encrypted tunnels over public or shared networks to provide private, authenticated connectivity between users, sites, and cloud resources, supporting enterprise remote access, inter-site communication, and compliance with data-in-transit protection requirements.
111 articles about Virtual Private Network
Decision Insights Threat Desk • December 2, 2025
Longwatch versions 6.309–6.334 have a code-injection flaw allowing unauthenticated HTTP GET requests to execute SYSTEM-level code.
Decision Insights Coverage • November 29, 2025
Arista Networks releases FTAS 2.3 with expanded test cases for SONiC validation covering EVPN, VXLAN, MCLAG, and ECMP scenarios.
Decision Insights Threat Desk • November 27, 2025
CISA updates Akira ransomware advisory outlining new attack methods and defensive patching recommendations.
Decision Insights Threat Desk • November 27, 2025
A vulnerability classified under CVE-2025-10259 affects Mitsubishi Electric's MELSEC iQ-F Series, causing potential denial of service via improper validation in TCP communication. The issue impacts various versions worldwide, with mitigation advice including VPN use and restricted physical and network access.
Decision Insights Threat Desk • November 27, 2025
AVEVA Edge 2023 R2 and prior contain a cryptographic flaw allowing local attackers with file access to brute force passwords.
Decision Insights Threat Desk • November 26, 2025
Draytek Vigor routers with DrayOS firmware have a remote code execution flaw in EasyVPN and LAN interfaces enabling attacker control.
Decision Insights Threat Desk • November 25, 2025
SiRcom SMART Alert (SiSA) version 3.0.48 allows unauthenticated remote access to control emergency sirens via bypass of login.
Decision Insights Threat Desk • November 25, 2025
Ashlar-Vellum advises updates for vulnerabilities in several products affecting versions 12.6.1204.207 and earlier.
Decision Insights Threat Desk • November 20, 2025
Rockwell Automation's Verve Asset Manager has a vulnerability, CVE-2025-11862, identified as incorrect authorization, affecting multiple versions. Users are advised to update to versions 1.41.4 and 1.42. CISA recommends defensive measures to reduce exploitation risks.
Decision Insights Threat Desk • November 20, 2025
Rockwell Automation identified a vulnerability in FactoryTalk Policy Manager that may allow remote exploitation leading to Denial of Service. Versions 6.51.00 and prior are affected, with a fix available in 6.60.00 and later. Users are advised to implement security best practices.
Decision Insights Threat Desk • November 20, 2025
Rockwell Automation's Studio 5000 Simulation Interface has vulnerabilities allowing unauthorized access and potential exploitation. Users are advised to upgrade to version 3.0.0 or later to mitigate risks associated with path traversal and SSRF vulnerabilities. CISA offers defensive measures and best practices for cyber defense.
Decision Insights Threat Desk • November 20, 2025
AVEVA has reported a vulnerability in its Application Server Immutable Deployment Environment that could allow attackers to exploit improper HTML script neutralization. Users are advised to update to secure versions and implement defensive measures to minimize risk.