American intelligence follows British lead in warning of serious VPN vulnerabilities

The US National Security Agency (NSA) is warning admins to patch a set of months-old security bugs that have recently come under active attack. The NSA's bulletin, issued earlier this week, says that state-sponsored hacking groups are now actively targeting the remote takeover and connection hijacking flaws in VPNs that were …

[Anonymous Coward]

Beware of TLA's ...

... bearing Rear Orifices.

[robidy]

Re: Beware of TLA's ...

I always set my password to incorrect.

That way I always get a reminder if I forget it.

[sum_of_squares]

"Hey boss, seems like our european cousins found out about the VPN backdoor we exploited 2 years ago."

"No biggie. Tell 'em we'll <<follow that lead>> or something. That will make them happy."

[Anonymous Coward]

Not all VPNs

"Check Point and pfSense, meanwhile, have confirmed they do encrypt the cookies in question." ( https://www.theregister.co.uk/2019/04/12/uscert_vpn_alert/ )

[JCitizen]

Re: Not all VPNs

Yeah, but CheckPoint RULES!!

[Pascal Monett]

What's that ?

"The US National Security Agency (NSA) is warning admins to patch a set of months-old security bugs that have recently come under active attack" they don't need any more.

There, FTFY.

[Khaptain]

Re: What's that ?

Exactly, now that they have successfully managed to hack the upgraded/patches versions.

[David Shaw]

Re: What's that ?

remote takeover and connection hijacking flaws in VPNs that were *first publicized in April of this year*

er... didn't a certain former Hawaii resident (now wearing a fur hat) mention several years ago that the start-up phase of any encrypted tunnel, sesh, VPN etc was highly targeted by his former contractual buddies; so I think VPN's are , and will always remain, virtually private, rather then being *actually* private in the real-world.

[thexfile]

NSA should be banned.

NSA hacks routers and phones.

[IGotOut]

Re: NSA should be banned.

That's their job.

[robidy]

Re: NSA should be banned.

Banning the NSA is like banning any other org you don't like....it goes undergound and becomes less accountable.

It already happens, the US tend to use GCHQ on US citizens and vice versa....

[Yet Another Anonymous coward]

Re: NSA should be banned.

If ordinary honest people don't have a secret government agency illegally spying on them then only the criminals will have an evil government agency spying on them ....

[schifreen]

Re: NSA should be banned.

Yup. In today's other news, bears crap in the woods and United breaks guitars.

This just in: Pope still catholic.

[Anonymous Coward]

Re: NSA should be banned.

Pope still catholic"

Groups of conservative Catholic clerics are apparently disputing that and plotting his replacement with a "true believer" in their own mould.

[Yet Another Anonymous coward]

Did I miss a memo ?

I thought VPNs were only used by criminal terrorist child eaters ?