Cyber Security News

Hackers Advertising Pulse Connect Secure VPN RCE 0-Day

Cybersecurity experts have identified a critical zero-day vulnerability in Pulse Connect Secure VPN, a widely used virtual private network solution.

The vulnerability, which allows for remote code execution (RCE), has been actively exploited by hackers, raising significant concerns among organizations relying on this technology for secure remote access.

The discovery was first reported on Twitter, highlighting the urgency of the situation.

ANYRUN malware sandbox’s 8th Birthday Special Offer: Grab 6 Months of Free Service

Hackers Advertise Exploit on Dark Web

The exploit has not only been identified but is also being actively advertised on dark web forums, making it accessible to a broader range of malicious actors.

This development significantly increases the risk of widespread attacks, as cybercriminals can now purchase and deploy the exploit with relative ease.

The advertisement of such a potent vulnerability on the dark web underscores the growing sophistication and boldness of cybercriminal networks.

In response to the discovery, cybersecurity experts are urging organizations using Pulse Connect Secure VPN to take immediate action.

This includes applying any available patches, implementing additional security measures, and closely monitoring network traffic for signs of compromise.

The urgency of these actions cannot be overstated, as the potential for data breaches and other cyber incidents remains high.

Organizations are also advised to stay informed through reliable cybersecurity channels to receive the latest updates and guidance on mitigating this critical threat.

Free Webinar on Live API Attack Simulation: Book Your Seat | Start protecting your APIs from hackers

Dhivya

Divya is a Senior Journalist at Cyber Security news covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

PupkinStealer Attacking Windows Users to Steal Browser Login Credentials

A newly discovered information-stealing malware dubbed "PupkinStealer" has emerged as a significant threat to Windows…

22 minutes ago

Asus One-Click Vulnerability Let Attackers Execute Malicious Remote Code

A critical vulnerability discovered in ASUS's DriverHub utility allowed malicious websites to execute arbitrary code…

28 minutes ago

Hackers Exploiting PyInstaller to Deploy Undetectable macOS Infostealer

Cybersecurity experts have recently uncovered a new breed of information-stealing malware that leverages legitimate development…

55 minutes ago

North Korean Hackers Leveraging Academic Forum Invitation & Dropbox to Deliver Malware

In March 2025, a sophisticated spear phishing campaign attributed to the North Korean state-sponsored hacking…

2 hours ago

SAP May 2025 Patch Tuesday – Patch for Actively Exploited 0-Day & 15 Vulnerabilities

SAP's May 2025 Security Patch Day includes an urgent update to the previously released emergency…

3 hours ago

Researchers Uncovered North Korean Nationals Remote IT Worker Fraud Scheme

In a significant cybersecurity investigation, researchers have revealed an elaborate fraud scheme orchestrated by North…

3 hours ago