<story><title>VPN users unmasked by zero-day vulnerability in Virgin Media routers</title><url>https://portswigger.net/daily-swig/vpn-users-unmasked-by-zero-day-vulnerability-in-virgin-media-routers</url></story><parent_chain></parent_chain><comment><author>johnklos</author><text>Nobody should use ISP provided equipment for anything security sensitive, ever. ISPs don&amp;#x27;t care about security at all, aside from &amp;quot;security&amp;quot; as a sales term, and aside from when they&amp;#x27;re getting a bad name because of egregious failures.&lt;p&gt;ARRIS shouldn&amp;#x27;t be given a year embargo, either. They&amp;#x27;re the same company who&amp;#x27;ve known since 2016 about hardware issues which cannot be corrected in software in the Intel PUMA chipsets, yet they still to this day sell devices with them. They don&amp;#x27;t care about fixing things - they care about selling things.</text></comment>
<story><title>VPN users unmasked by zero-day vulnerability in Virgin Media routers</title><url>https://portswigger.net/daily-swig/vpn-users-unmasked-by-zero-day-vulnerability-in-virgin-media-routers</url></story><parent_chain></parent_chain><comment><author>Angostura</author><text>For context. This is Virgin Media which demands your passwords (including e-mail passwords) must be no longer than 10 characters, must begin with a letter, not a number and cannot include any special characters.&lt;p&gt;Security is not their priority.</text></comment>