Vulnerable Private Networks: Corporate VPNs Exploited in the Wild

**Pulse Secure SSL VPN exploitation and session hijacking:** The report warns that a vulnerability in Pulse Secure SSL VPNs has likely allowed attackers to steal cleartext credentials and session database data since August 2019, enabling session hijacking by setting a valid DSID cookie and bypassing authentication (including 2FA). It provides log examples for detecting unauthenticated web requests and remote address changes that indicate session reuse, and recommends monitoring for suspicious IPs and multi-factor authentication failures.