VPN & Remote Access
VPN flaws, remote access problems, and how businesses move staff and contractors off the corporate VPN without losing access.

Working From Home: Fixing Remote Access Problems
When a laptop at home can't reach office files or apps, the cause is small: a missing client, an old VPN app or a stale shortcut. What to check.
Read the article →
SonicWall SSLVPN CVE-2026-19868: SAML MFA Bypass
CISA lists SonicWall SonicOS flaw CVE-2026-19868 as exploited. With SAML on for SSLVPN, MFA can be bypassed. Fixed versions and what to check.

Ivanti Connect Secure Zero-Days: Patch and Check
Attackers chained three Ivanti Connect Secure flaws to get root on VPN appliances. CISA lists all three as exploited. Fixed versions and checks.

Cisco ASA and FTD VPN Flaw: Remote Reload Bug
CISA lists Cisco ASA and FTD flaw CVE-2026-76418 as exploited. A crafted VPN request can reload the firewall. Affected setups, fixed versions, steps.

BeyondTrust Remote Support Zero-Day: What to Check
CVE-2026-102764 let a China-linked group take over BeyondTrust Remote Support appliances. Who is affected, how to patch, and how to spot a breach.

FortiOS CVE-2025-61624: Admin Bug Leads to Root
CISA lists FortiOS flaw CVE-2025-61624 as exploited. It needs admin access, but attackers used it to reach root. Affected versions and what to do.

Ransomware Gangs Exploit PAN-OS GlobalProtect Flaw
Qilin and Inc operators are attempting CVE-2026-0257 against Palo Alto GlobalProtect VPNs. Who is affected, fixed versions, and what to check first.

Giving Contractors Access Without a VPN Client
Contractors and temps on personal devices are a real access problem. A browser-based alternative to VPN clients, and where it does and doesn't fit.

The Business Case for Replacing Your VPN
New research shows most organizations are already moving off VPNs for Zero Trust access. The data on why, and what it takes to get leadership buy-in.

Retiring the Corporate VPN: A Phased Rollout
How AllTech retires a corporate VPN in phases with Cloudflare Zero Trust, from app discovery and Access/Tunnel rollout to safe decommissioning.






















