VPN

POCs for CVSS 10 bug are out of the bag, tens of thousands are exposed, and telemetry mitigation didn't work.

Patch? You'll need to wait until Sunday. Turn off telemetry (no, really; it's a mitigation!) and go to the pub. OK, maybe don't.

"Disable SSL VPN (disable webmode is NOT a valid workaround..."

"Enterprises are deploying a mix of technologies for secure remote access, including VPN, ZTNA, SD-WAN and SASE – on average respondents are using 2.3 different solutions, but..."

VPN appliances "all appear to have been constructed with the code equivalent of string, stamped with the word ‘secure’ and then just left to decay for 20 years..."

TTPs and telemetry suggest a real focus on zero days and appliances by Chinese APTs.

Zscaler's latest report says the use of buggy VPNs by end-users could be putting networks at risk of attack

From culture to SASE, DevSecOps to network segmentation

Patch, patch, patch...