Insights topic

VPN & Remote Access

VPN flaws, remote access problems, and how businesses move staff and contractors off the corporate VPN without losing access.

Subscribe for new articles →
high
Security Advisory

SonicWall SSLVPN CVE-2026-19868: SAML MFA Bypass

CISA lists SonicWall SonicOS flaw CVE-2026-19868 as exploited. With SAML on for SSLVPN, MFA can be bypassed. Fixed versions and what to check.

high
Security Advisory

Ivanti Connect Secure Zero-Days: Patch and Check

Attackers chained three Ivanti Connect Secure flaws to get root on VPN appliances. CISA lists all three as exploited. Fixed versions and checks.

high
Security Advisory

Cisco ASA and FTD VPN Flaw: Remote Reload Bug

CISA lists Cisco ASA and FTD flaw CVE-2026-76418 as exploited. A crafted VPN request can reload the firewall. Affected setups, fixed versions, steps.

critical
Security Advisory

BeyondTrust Remote Support Zero-Day: What to Check

CVE-2026-102764 let a China-linked group take over BeyondTrust Remote Support appliances. Who is affected, how to patch, and how to spot a breach.

medium
Security Advisory

FortiOS CVE-2025-61624: Admin Bug Leads to Root

CISA lists FortiOS flaw CVE-2025-61624 as exploited. It needs admin access, but attackers used it to reach root. Affected versions and what to do.

high
Security Advisory

Ransomware Gangs Exploit PAN-OS GlobalProtect Flaw

Qilin and Inc operators are attempting CVE-2026-0257 against Palo Alto GlobalProtect VPNs. Who is affected, fixed versions, and what to check first.

Guide

Giving Contractors Access Without a VPN Client

Contractors and temps on personal devices are a real access problem. A browser-based alternative to VPN clients, and where it does and doesn't fit.

Guide

The Business Case for Replacing Your VPN

New research shows most organizations are already moving off VPNs for Zero Trust access. The data on why, and what it takes to get leadership buy-in.

Guide

Retiring the Corporate VPN: A Phased Rollout

How AllTech retires a corporate VPN in phases with Cloudflare Zero Trust, from app discovery and Access/Tunnel rollout to safe decommissioning.

Trusted by dozens of businesses