VPN
Safeguard articles tagged "VPN" — guides, analysis, and best practices for software supply chain and application security.
9 articles
Ivanti Connect Secure CVE-2026-104935: A Header Picks the Script, the URL Picks the Rules
CISA added Ivanti Connect Secure CVE-2026-104935 to KEV on 13 October. Affected and fixed versions, how the authentication bypass and code execution chain works, why the Integrity Checker misses it, and what to check beyond the upgrade.
OpenVPN CVE-2026-84790: How a NUL Byte in a Certificate Name Turns 'admin\0impersonator' Into 'admin'
OpenVPN 2.7.8 fixes CVE-2026-84790, a bug where a certificate whose common name contains a hidden NUL byte, such as admin\0impersonator, is treated as belonging to admin. A peer holding such a certificate could pass a --verify-x509-name admin check, and on a server it would be handed admin's per-client configuration.
Libreswan's October Fixes: A Pre-Auth Use-After-Free, Two AI-Found Crashes, and a Fix That Broke FIPS Mode
Libreswan 5.4.1 and 5.3.3 fix four vulnerabilities, three of them reachable by an unauthenticated peer. The CVE records appeared on 13 October, and as of 14 October Debian and Red Hat hadn't shipped fixed packages. What each bug does, who is exposed, and what to do now.
Fog Ransomware: Why the Education Sector Keeps Getting Hit
Fog ransomware has carved a niche targeting schools and universities, exploiting chronic underfunding and SonicWall VPN vulnerabilities to devastating effect.
Akira Ransomware VPN Appliance Exploitation
Akira has industrialized VPN appliance exploitation. Here is the tradecraft, the advisories that document it, and what defenders must do about edge software supply chain risk.
Akira Ransomware: Exploiting VPN Vulnerabilities for Supply Chain Entry
Akira ransomware systematically exploited Cisco VPN vulnerabilities as its primary entry vector, targeting organizations through the network infrastructure they trusted most.
WireGuard for Development Infrastructure: Fast, Simple, and Secure Tunneling
WireGuard's simplicity and performance make it well-suited for securing development infrastructure. Here is how to deploy it for build servers, artifact repositories, and developer access.
VPN Security for Remote Development Teams: Beyond the Basics
Remote development teams depend on VPNs, but misconfigured VPNs create supply chain risks. Split tunneling, credential management, and endpoint security all affect build pipeline integrity.
Pulse Secure VPN Zero-Day CVE-2021-22893: When Your Security Gateway Becomes the Backdoor
Chinese APT groups exploited CVE-2021-22893 in Pulse Secure VPN to breach defense contractors and government agencies. The irony of a security product being the entry point.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.