Hackers are taking advantage of unpatched enterprise VPN setups ‒ specifically, a long-known bug in Pulse Secure’s code ‒ to spread ransomware and other nasties. British infosec specialist Kevin Beaumont says a severe hole in Pulse Secure’s Zero Trust Remote Access VPN software is being used by miscreants as the entry point for inserting malware attacks.

Read full article on The Register