Hackers are exploiting ArrayOS AG VPN flaw to plant webshells

Published on December 4, 2025

Threat actors have been exploiting a command injection vulnerability in Array AG Series VPN devices to plant webshells and create rogue users. [...]

Continue reading on website
Other news

NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices

December 4, 2025
The UK's National Cyber Security Center (NCSC) announced the testing phase of a new service called Proactive Notifications, designed to inform organizations in the country of vulnerabilities present in their environment. [...]

JPCERT Confirms Active Command Injection Attacks on Array AG Gateways

December 5, 2025
A command injection vulnerability in Array Networks AG Series secure access gateways has been exploited in the wild since August 2025, according to an alert issued by JPCERT/CC this week.The vulnerability, which does not have a CVE identifier, was addressed by the company on May 11, 2025. It's rooted in Array's DesktopDirect, a remote desktop access solution that allows users to securely access