VPN - Malwlab

A rack-mounted network appliance with one port lit red, rendered with AI. The single lit port stands in for the compromised path in the Ivanti Connect Secure chain.

vulnerability

Ivanti Connect Secure: two new KEV flaws chain with the October zero-day

CISA added two Ivanti Connect Secure vulnerabilities to the Known Exploited Vulnerabilities catalog on 2026-10-30. Both are documented as chainable with the October 13 zero-day, and one was already being exploited in the wild before it reached the list.

Ivanti

The Patched Box

A fully patched Ivanti Connect Secure appliance got hit by a zero-day chain that ran entirely in memory and left no trace the vendor's own integrity tool could find.

self-hosting

Headscale vs Tailscale: Self-Hosting Your Mesh VPN Control Plane — Security, Sovereignty, and Tradeoffs

A practical comparison for homelab operators deciding whether to self-host WireGuard mesh VPN control plane or trust Tailscale's managed SaaS.