• Richard Warren
• 09 Apr, 2026
• • Vulnerability
  • Disclosure
  • Zscaler
  • ZTNA

Next, Next, SYSTEM: Exploiting NSIS installer bugs to escalate privileges in Zscaler Client Connector

Exploiting NSIS installer bugs to escalate privileges in Zscaler Client Connector

Read Article

• Richard Warren
• David Cash
• 29 Aug, 2025
• • Vulnerability
  • ZTNA
  • DEFCON
  • Netskope

Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309)

Never Trust, Always Verify - except when you have to trust the server isn’t malicious .. and install this CA certificate and MSI while …

Read Article

• Richard Warren
• David Cash
• 15 Aug, 2025
• • Vulnerability
  • ZTNA
  • DEFCON
  • Netskope

Advisory - Netskope Cross-tenant Authentication Bypass

Advisory - Netskope Cross-tenant Authentication Bypass

Read Article

• Richard Warren
• David Cash
• 09 Aug, 2025
• • Vulnerability
  • Zscaler
  • ZTNA
  • DEFCON

Advisory - Zscaler SAML Authentication Bypass (CVE-2025-54982)

Advisory - Zscaler SAML Authentication Bypass (CVE-2025-549820)

Read Article

• Gavin Holt
• 09 Aug, 2025
• • Vulnerability
  • NachoVPN
  • ZTNA
  • DEFCON

Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview

Uncovering critical flaws in ZTNA solutions, allowing attackers to escalate privileges on end user devices and to completely bypass authentication, …

Read Article