Network & VPN Security News | Hexnode Threat Watch

Network and VPN

Citrix NetScaler CVE-2026-88772 Exploitation Web Shells Root Access and Internal Tunneling

Citrix NetScaler CVE-2026-88772 Exploitation: Web Shells, Root Access and Internal Tunneling

Sep 30

7 min read

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

Sep 28

8 min read

MikroTrick RouterOS Exploit Chain Enables Passwordless MikroTik Takeover

MikroTrick RouterOS Exploit Chain Enables Passwordless MikroTik Takeover

Sep 24

8 min read

VeloCloud Orchestrator Zero-Day Puts SD-WAN Control Planes at Risk

VeloCloud Orchestrator Zero-Day Puts SD-WAN Control Planes at Risk

Sep 24

5 min read

Check Point CVE-2026-93616 Management Server Zero-Day Exploited in Targeted Attacks

Check Point CVE-2026-93616: Management Server Zero-Day Exploited in Targeted Attacks

Sep 23

8 min read

Coast Guard and FBI Board Tankers After Maritime Cyberattack

Coast Guard and FBI Board Tankers After Maritime Cyberattack

Sep 18

7 min read

CISA KEV Flags Exploited Artifactory, ScreenConnect and RouterOS Vulnerabilities

CISA KEV Flags Exploited Artifactory, ScreenConnect and RouterOS Vulnerabilities

Sep 16

8 min read

WatchGuard CVE-2025-14733

WatchGuard CVE-2025-14733: Ransomware Exploitation and Enterprise Response

Sep 15

7 min read

Cisco FMC Exploits Move From Edge Access to Qilin Ransomware and Cyclops Blink

Cisco FMC Exploits Move From Edge Access to Qilin Ransomware and Cyclops Blink

Sep 14

7 min read

PivotC2 Turns an Old Fortinet Flaw Into a Fresh Intrusion Path

PivotC2 Turns an Old Fortinet Flaw Into a Fresh Intrusion Path

Sep 14

7 min read

cve 2026 19490

CVE-2026-19490: Citrix NetScaler Flaw Joins CISA KEV List

Sep 14

6 min read

N-able N-central CVE-2026-86218 Pre-Auth RCE and MSP Fleet Risk

N-able N-central CVE-2026-86218: Pre-Auth RCE and MSP Fleet Risk

Sep 11

6 min read

Cisco FMC Root-Access Flaw Moves From Advisory to Confirmed Exploitation

Cisco FMC Root-Access Flaw Moves From Advisory to Confirmed Exploitation

Sep 10

5 min read

MikroTrick Turns Exposed RouterOS SSH Into Full Admin Takeover

MikroTrick Turns Exposed RouterOS SSH Into Full Admin Takeover

Sep 9

5 min read

F5 BIG-IP APM Rootkit How PoisonedRefresh Hides a Web Shell in Memory

F5 BIG-IP APM Rootkit: How PoisonedRefresh Hides a Web Shell in Memory

Sep 9

7 min read

Sangoma Switchvox Attack Exploits CVE-2026-9586 to Attempt Reverse Shell

Sangoma Switchvox Attack Exploits CVE-2026-9586 to Attempt Reverse Shells

Sep 3

7 min read

Dysphoria Botnet Turns Weak Edge Devices Into DDoS and Proxy Infrastructure

Dysphoria Botnet Turns Weak Edge Devices Into DDoS and Proxy Infrastructure

Aug 20

6 min read

Tailscale-persistence

Tailscale Persistence & OpenSSH Maintain Access After C2 Outage

Aug 20

5 min read

CVE-2026-20349 Cisco ASA and FTD VPN Flaw Exploited in the Wild

CVE-2026-20349: Cisco ASA and FTD VPN Flaw Exploited in the Wild

Aug 17

9 min read

Polish Energy Plant Breach How a Private APN Opened a Path Into OT

Polish Energy Plant Breach: How a Private APN Opened a Path Into OT

Aug 11

10 min read

TP-Link Omada Vulnerabilities Expose Risks in Zero-Touch Provisioning

TP-Link Omada Vulnerabilities Expose Risks in Zero-Touch Provisioning

Aug 7

8 min read

Cisco FMC CVE-2026-20316

Cisco FMC CVE-2026-20316: Static Credential Flaw Exploited as a Zero-Day

Jul 30

7 min read

PAN-OS VPN Flaw CVE-2026-0257 Exploited in Qilin Ransomware Attack

PAN-OS VPN Flaw CVE-2026-0257 Exploited in Qilin Ransomware Attacks

Jul 28

7 min read

ontrac data breach

OnTrac Data Breach After Network Hack: Things to Learn

Jul 28

6 min read

HelloNet Malware Abuses ViPNet Through DLL Side loading

HelloNet Malware Abuses ViPNet Through DLL Sideloading

Jul 27

7 min read

Google FBI NetNut Takedown

Google FBI NetNut Takedown: What Enterprises Should Learn from the NetNut Residential Proxy Disruption

Jul 6

5 min read

fortinet credential theft

FortiBleed Credential Theft Linked to Lynx Ransomware Operations

Jul 3

7 min read

Kubota Data Breach

Kubota Data Breach: Month-Long Network Access May Have Exposed Employee and Dependent Data

Jul 2

5 min read

cve 2026 20245

CVE-2026-20245: Cisco SD-WAN Zero-Day Attacks Gained Root Access

Jun 29

7 min read

cisco unified cm vulnerability

Cisco Unified CM Vulnerability Exploited: Why VoIP Infrastructure Needs Patch Urgency

Jun 26

6 min read

Velvet Ant Hides in PAM and OpenSSH to Turn Linux Authentication Into a Backdoor

Velvet Ant Hides in PAM and OpenSSH to Turn Linux Authentication Into a Backdoor

Jun 16

6 min read

palo alto globalprotect vulnerability

Palo Alto GlobalProtect Vulnerability CVE-2026-0257 Exploited in Active Attacks

Jun 3

3 min read