TL;DR Ivanti disclosed CVE-2026-104935 on October 13, 2026, and confirmed the flaw is already exploited in the wild. The Ivanti Connect Secure vulnerability lets a remote, unauthenticated attacker run arbitrary commands. Fixed versions are available now. Why It Matters Connect Secure is a VPN gateway that sits at the network edge. A breach can therefore give attackers a foothold inside corporate networks.

TL;DR SonicWall published advisory SNWLID-2026-0016 on September 1, 2026. It confirms active exploitation of two SMA1000 flaws. The headline SonicWall SMA1000 vulnerability, CVE-2026-83548, is a pre-authentication SSRF rated a maximum 10.0 CVSS. A second bug, CVE-2026-83549, adds post-authentication remote code execution. Why It Matters SMA1000 appliances sit at the network edge as enterprise VPN gateways. Therefore, a pre-auth flaw exposes the front door to remote attackers.

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors' and other cybercriminals' malicious activities, including ransomware attacks against Americans. The VPN, named First VPN Service (1VPNS), has been accused of offering its tools to ransomware groups, along with its 45-year-old Ukrainian