Attackers Continue to Exploit MFA Coverage Gaps in VPN and RDP Access
Recent ransomware incidents highlight how attackers exploit authentication gaps where MFA protects cloud applications but VPN, RDP and Windows logon remain password-only.

Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
Recent ransomware incidents highlight how attackers exploit authentication gaps where MFA protects cloud applications but VPN, RDP and Windows logon remain password-only.
Advanced threat actors are exploiting a path traversal vulnerability in Fortinet FortiOS to deploy PEERSTITCH, a memory-resident ARM64 malware that bypasses security checks on VPN sessions.
CISA has called for immediate updates to Ivanti Connect Secure appliances following active exploitation of an authentication bypass vulnerability tracked as CVE-2026-104935.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close