Sandworm hackers target IT pros with trojanized WireGuard VPN client
Teaser from the source
Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake job offers since at least May. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on WireGuard
Other advisories
- HighCVE-2026-99059wireguard: noise: reject response consumption after intermediate initiation
- Not ratedosv:CVE-2026-79977WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr
- Not ratedosv:CVE-2026-99059wireguard: noise: reject response consumption after intermediate initiation
- MediumCVE-2026-54551WireGuard Portal, oder wg-portal, ist ein webbasiertes Konfigurationsportal zur Verwaltung von WireGuard-Servern.
- Not ratedosv:CVE-2026-54551WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization)
- LowCVE-2026-13735Die Implementierung von WireGuard in Zephyr in subsys/net/lib/wireguard/wg_crypto.
- Not ratedosv:CVE-2026-13735WireGuard keepalive transport-data messages accepted without Poly1305 authentication
- Not ratedosv:CVE-2026-13734Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack
ID