We’re reading about a flaw called ‘TunnelVision’ that could give hackers access to overcome virtually any VPN security solutions.
It works by manipulating routing in DHCP, which is the mechanism networks use to hand out IP addresses to devices. DHCP has been around for decades and predates the recent surge of cyber activity.
The recommendations are to keep your VPN software up-to-date.
Refer NVD – CVE-2024-3661 (nist.gov)
As always, Cybersecurity solutions rely on layers upon layers, so if one layer is defeated, you still have protections in place, and each layer makes any vulnerabilities harder for a hacker to exploit.
At the same time, it is concerning to note that the NIST Vulnerability Database is having a hard time keeping up with new flaws. NVD Program Announcement – Updated (nist.gov)