GoKawiil - Tech News

Microsoft confirms September Windows 11 updates break Always On VPN

Microsoft has told IT administrators that the September 2026 security updates for Windows 11 versions 26H1, 25H2 and 24H2 can cause Always On VPN connections to fail when automatic protocol selection between IKEv2 and SSTP is enabled. Affected connections may get stuck in a 'Connecting' state or throw a 'port already in use' error on retry. Microsoft has not yet issued a permanent fix but recommends administrators manually set the VPN profile to use only SSTP or only IKEv2 as a workaround.

bleepingcomputer.com · 2026-09-23 · always on vpn, windows 11, microsoft

Android NAT-T keepalive API lets apps bypass VPN lockdown mode

Security researchers found that Android's public NAT-T socket-keepalive API allows ordinary apps to send UDP packets directly to a router, bypassing Always-on VPN and 'Block connections without VPN' protections. Tests on a Pixel 8 Pro, Samsung SM-F966B, and Nothing A059, all running Android 16, confirmed that keepalive packets reached the physical gateway outside the VPN tunnel, with one device sustaining a leak for over 24 hours. The root cause traces to changes in Android's startNattKeepaliveWithFd function, where validation checks tying the socket to the caller's VPN policy were added and later removed.

supuk.ch · 2026-09-11 · android, nat-t keepalive, always-on vpn