Tag: vpn-security

Hunting Ivanti Connect Secure Zero-Days: From Auth Bypass to Implant, With IoCs and Log Sources

pr0h0•November 4, 2026

Rapid7's warning about two actively exploited Ivanti Connect Secure zero-days anchors a deep walkthrough that traces auth bypass to implant, lists concrete IoCs and log sources, and provides a patch-or-mitigate decision tree for teams that cannot take VPNs offline.

ivantizero-daythreat-hunting

Chaining Three Ivanti Connect Secure Zero-Days to Root a Fully Patched VPN

pr0h0•October 14, 2026

Attackers chained three Ivanti Connect Secure zero-days to escalate from initial access to root on fully patched VPN appliances, with active exploitation observed before all fixes were available.

ivantizero-dayvpn-security

Hunting Ransomware Initial Access in Palo Alto GlobalProtect Logs

pr0h0•October 12, 2026

A log-focused walkthrough of how ransomware operators abuse the Palo Alto GlobalProtect flaw to slip into enterprise networks over VPN, which artifacts betray the intrusion, and how to harden remote-access gateways before the next crew arrives.

palo-altoglobalprotectransomware