2014 and Firewall - Cyber Security Informer

Threat Trends: Firewall

Cisco Security

OCTOBER 19, 2021

In any perimeter defense a key component is firewalls—the proverbial guard towers in your fortifications. In this Threat Trends release, we’ll be looking at Cisco Secure Firewall. The goal is to highlight the common threats that organizations encounter and block with Secure Firewall. Secure Firewall version 7.0

Firewall

Firewall Authentication DNS Accountability

Hackers exploit SQL injection zero-day issue in Sophos firewall

Security Affairs

APRIL 26, 2020

Cybersecurity firm Sophos releases an emergency patch to address an SQL injection flaw in its XG Firewall product that has been exploited in the wild. Cybersecurity firm Sophos has released an emergency patch to address an SQL injection zero-day vulnerability affecting its XG Firewall product that has been exploited in the wild.

Firewall

Firewall Passwords Accountability Advertising

Retail giant Home Depot agrees to a $17.5 million settlement over 2014 data breach

Security Affairs

NOVEMBER 25, 2020

million settlement in a multi-state investigation of the data breach that the company suffered in 2014. million settlement over the 2014 data breach. In 2014, Home Depot revealed that the data breach impacted 56 million customers across the US and Canada. Retail giant Home Depot has agreed to a $17.5 ” . .

Retail

Retail Data breaches Penetration Testing Information Security

Sophos blocked attacks exploiting XG Firewall zero-day to deploy Ransomware

Security Affairs

MAY 21, 2020

Hackers attempted to exploit a zero-day flaw in the Sophos XG firewall to distribute ransomware to Windows machines, but the attack was blocked. It was designed to download payloads intended to exfiltrate XG Firewall-resident data. Sophos was informed of the attacks exploiting the zero-day issue by one of its customers on April 22.

Firewall

Firewall Ransomware Passwords VPN

Cisco fixes 5 critical flaws that could allow router firewall takeover

Security Affairs

JULY 16, 2020

Cisco has released security updates to address critical remote code execution (RCE), authentication bypass, and static default credential vulnerabilities affecting multiple router and firewall devices. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – hacking, Cisco).

Firewall

Firewall Small Business Wireless Advertising

Sophos fixed a critical vulnerability in Cyberoam firewalls

Security Affairs

OCTOBER 10, 2019

A vulnerability in Sophos Cyberoam firewalls could be exploited by an attacker to gain access to a target’s internal network without authentication. Sophos addressed a vulnerability in its Cyberoam firewalls that could be exploited by an attacker to gain access to a company’s internal network without providing a password.

Firewall

Firewall VPN Passwords Internet

Palo Alto Networks fixes a critical flaw in firewall PAN-OS

Security Affairs

JUNE 29, 2020

Palo Alto Networks addressed a critical flaw in the PAN-OS of its next-generation firewalls that could allow attackers to bypass authentication. OS ) that powers its next-generation firewalls that could allow unauthenticated network-based attackers to bypass authentication. x base score of 10. Pierluigi Paganini.

Firewall

Firewall Authentication VPN Advertising

NEW TECH: Alcide introduces a “microservices firewall” as a dynamic ‘IaaS’ market takes shape

The Last Watchdog

APRIL 23, 2019

I recently sat down with Gadi Naor, CTO and co-founder of Alcide , to learn more about the “microservices firewall” this Tel Aviv-based security start-up is pioneering. Then on June 7, 2014, Google released Kubernetes – Greek for helmsman – to the open source software community.

Marketing

Marketing Firewall Architecture Software

CISA adds Sophos firewall bug to Known Exploited Vulnerabilities Catalog

Security Affairs

APRIL 1, 2022

Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Sophos firewall flaw and seven other issues to its Known Exploited Vulnerabilities Catalog. The CVE-2022-1040 is an authentication bypass vulnerability that resides in the User Portal and Webadmin areas of Sophos Firewall. MR3 (18.5.3) and earlier.

Firewall

Firewall Authentication Hacking Cybersecurity

335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997

Security Affairs

JULY 3, 2023

Researchers reported that there are 490,000 Fortinet firewalls exposing SSL VPN interfaces on the internet, and roughly 69% of them are still vulnerable to CVE-2023-27997. ” continues the report.

Firewall

Firewall VPN Firmware Internet

Palo Alto Networks addresses tens of serious issues in PAN-OS

Security Affairs

MAY 15, 2020

Palo Alto Networks addressed tens of vulnerabilities in PAN-OS, the software that runs on the company’s next-generation firewalls. Palo Alto Networks has issued security updates to address tens of vulnerabilities in PAN-OS, the software that runs on the company’s next-generation firewalls. Pierluigi Paganini.

Firewall

Firewall Authentication Advertising VPN

MyBook Users Urged to Unplug Devices from Internet

Krebs on Security

JUNE 25, 2021

“These products have been discontinued since 2014 and are no longer covered under our device software support lifecycle. . “The vulnerability report CVE-2018-18472 affects My Book Live devices originally introduced to the market between 2010 and 2012,” reads a reply from Western Digital that Wizcase posted to its blog.

Internet

Internet Internet Backups Small Business

Hackers are actively exploiting critical RCE in WordPress sites using File Manager plugin

Security Affairs

SEPTEMBER 2, 2020

Wordfence confirmed the ongoing attack, its Web Application Firewall already blocked over 450,000 exploit attempts during the last several days. “The Wordfence firewall has blocked over 450,000 exploit attempts targeting this vulnerability over the past several days. ” Wordfence said. ” Wordfence said.

Firewall

Firewall Advertising Hacking

Actions Target Russian Govt. Botnet, Hydra Dark Market

Krebs on Security

APRIL 7, 2022

Department of Justice (DOJ) says the GRU’s hackers built Cyclops Blink by exploiting previously undocumented security weaknesses in firewalls and routers made by both ASUS and WatchGuard Technologies. A statement from the U.S. energy facilities. and international companies and entities, including U.S. ” HYDRA. . ” HYDRA.

Marketing

Marketing Energy and Utilities Malware Ransomware

FBI is warning of cyber attacks against Windows 7 systems that reached end-of-life

Security Affairs

AUGUST 6, 2020

Ensuring anti-virus, spam filters, and firewalls are up to date, properly configured, and secure.” After the Windows XP end of life on 28 April 2014, the healthcare industry saw a large increase of exposed records the following year,” the FBI said. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .

Cyber Attacks

Cyber Attacks Healthcare Firewall Advertising

Palo Alto Networks addresses another high severity issue in PAN-OS devices

Security Affairs

JULY 9, 2020

Palo Alto Networks addressed a new severe vulnerability in the PAN-OS GlobalProtect portal that impacts PAN next-generation firewalls. Recently Palo Alto Network addressed a critical vulnerability , tracked as CVE-2020-2021, affecting the PAN-OS operating system that powers its next-generation firewall. x base score of 10. .

Firewall

Firewall Advertising Authentication Hacking

Snake Ransomware isolates infected Systems before encrypting files

Security Affairs

JULY 5, 2020

Snake samples employed in more recent attacks implements the ability to enable and disable the firewall and leverage specific commands to block unwanted connections to the system. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – hacking, SNAKE ransomware).

Encryption

Encryption Ransomware Firewall Backups

Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135

Security Affairs

OCTOBER 16, 2020

. “A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. This vulnerability affected SonicOS Gen 6 version 6.5.4.7,

VPN

VPN Firewall Advertising Internet

Security Affairs newsletter Round 501 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

DECEMBER 8, 2024

warn of PRC-linked cyber espionage targeting telecom networks U.S.

Artificial Intelligence

Artificial Intelligence Spyware Hacking Ransomware

Cisco addressed CVE-2019-1663 RCE flaw in wireless routers

Security Affairs

MARCH 1, 2019

“A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.” RV215W Wireless-N VPN Router: 1.3.1.1.

Wireless

Wireless VPN Firewall Advertising

KingComposer fixes a reflected XSS impacting 100,000 WordPress sites

Security Affairs

JULY 10, 2020

We release a firewall rule covering both the patched and unpatched vulnerabilities to our Premium users. July 15, 2020 – Firewall rule becomes available to Wordfence Free users. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firewall

Firewall Advertising Hacking Information Security

New Ttint IoT botnet exploits two zero-days in Tenda routers

Security Affairs

OCTOBER 5, 2020

Unlike other IoT DDoS botnets, Ttint implements 12 remote access functions such as Socket5 proxy for router devices, tampering with router firewall and DNS settings, executing remote custom system commands. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” concludes the report.

IoT

IoT Firmware Advertising DNS

CVE-2020-3452 flaw in Cisco ASA/FTD exploited within hours after the disclosure

Security Affairs

JULY 24, 2020

Cisco fixed CVE-2020-3452 high-severity path traversal flaw in its firewalls that can be exploited by remote attackers to obtain sensitive files from the targeted system. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Firewall

Firewall Advertising Software Hacking

Palo Alto Networks fixes severe Code Execution and DoS flaws in PAN-OS

Security Affairs

SEPTEMBER 10, 2020

Palo Alto Networks addressed critical and high-severity denial-of-service (DoS) and arbitrary code execution vulnerabilities in its PAN-OS firewall software. Palo Alto Networks has released security updates to patch critical and high-severity denial-of-service (DoS) and arbitrary code execution vulnerabilities in its PAN-OS firewall software.

Firewall

Firewall Authentication Advertising Software

Siemens addresses multiple critical flaws in SINUMERIK Controllers

Security Affairs

DECEMBER 16, 2018

.” The most serious flaw, tracked as CVE-2018-11466 and ranked with CVSS score of 10, could be exploited by an unauthenticated attacker on the network to trigger a DoS condition on the integrated software firewall or execute arbitrary code in the context of the firewall by sending specially crafted packets to TCP port 102.

Firewall

Firewall Advertising Software Hacking

DoS attack the caused disruption at US power utility exploited a known flaw

Security Affairs

SEPTEMBER 9, 2019

A DoS attack that caused disruptions at a power utility in the United States exploited a flaw in a firewall used in the facility. The incident took place earlier this year, threat actors exploited a known vulnerability in a firewall used by the affected facility to cause disruption. and 7 p.m., power grid ( Energywire , April 30). .

Energy and Utilities

Energy and Utilities Firewall Firmware Advertising

Expert found a hardcoded SSH Key in Fortinet SIEM appliances

Security Affairs

JANUARY 20, 2020

The feature was implemented to enable connecting to collectors from the supervisor when there is a firewall between the collector and the supervisor. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Authentication

Authentication Advertising Firmware Firewall

Expert released DOS Exploit PoC for Critical Windows RDP Gateway flaws

Security Affairs

JANUARY 24, 2020

. “Simply disabling UDP Transport, or firewalling the UDP port (usually port 3391) is sufficient to prevent exploitation,” explained the popular researcher Marcus Hutchins. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising

Advertising Firewall Education Engineering

Imperva data Breach: WAF customers’ data exposed

Security Affairs

AUGUST 27, 2019

Security firm Imperva revealed it has suffered a data breach that affecting some customers of its Cloud Web Application Firewall (WAF) product. Cybersecurity firm Imperva disclosed a data breach that has exposed sensitive information for some customers of its Cloud Web Application Firewall (WAF) product, formerly known as Incapsula.

Data breaches

Data breaches Firewall Passwords Advertising

Juniper Networks addressed many issues in its products

Security Affairs

JULY 10, 2020

Juniper Networks addressed several vulnerabilities in its firewalls, most of them can be exploited by attackers for denial-of-service (DoS) attacks. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Advertising

Advertising Firmware Firewall Internet

Microsoft accidentally reveals Wormable Win SMBv3 CVE-2020-0796 Flaw

Security Affairs

MARCH 10, 2020

Waiting for a security update that will address the issue, experts at Cisco Talos recommend disabling SMBv3 compression and blocking the 445 TCP port on client computers and firewalls to mitigate the issue. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Creating a DWORD value called 3.

Advertising

Advertising Firewall Hacking Software

Cyber Defense Magazine – September 2019 has arrived. Enjoy it!

Security Affairs

SEPTEMBER 4, 2019

In addition, we’re shooting for 7x24x365 uptime as we continue to scale with improved Web App Firewalls, Content Deliver Networks (CDNs) around the Globe, Faster and More Secure DNS and CyberDefenseMagazineBackup.com up and running as an array of live mirror sites.

DNS

DNS Advertising Firewall Mobile

Threat actors target WordPress sites using vulnerable File Manager install

Security Affairs

SEPTEMBER 11, 2020

The security firm confirmed the ongoing attack, its Web Application Firewall blocked over 450,000 exploit attempts during the last several days. The Wordfence firewall has blocked over 450,000 exploit attempts targeting this vulnerability over the past several days. Wordfence said. Pierluigi Paganini.

Firewall

Firewall Passwords Advertising Malware

Cyber Defense Magazine – August 2019 has arrived. Enjoy it!

Security Affairs

AUGUST 1, 2019

In addition, we’re shooting for 7x24x365 uptime as we continue to scale with improved Web App Firewalls, Content Deliver Networks (CDNs) around the Globe, Faster and More Secure DNS and CyberDefenseMagazineBackup.com up and running as an array of live mirror sites.

DNS

DNS Advertising Firewall Mobile

TeamTNT is the first cryptomining bot that steals AWS credentials

Security Affairs

AUGUST 18, 2020

Use firewall rules to limit any access to Docker APIs. We strongly recommend using a whitelisted approach for your firewall ruleset. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .” Pierluigi Paganini.

Firewall

Firewall Advertising Malware Cryptocurrency

Large-scale campaign targets configuration files from WordPress sites

Security Affairs

JUNE 4, 2020

“Between May 29 and May 31, 2020, the Wordfence Firewall blocked over 130 million attacks intended to harvest database credentials from 1.3 Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Advertising

Advertising Firewall Accountability Authentication

NEW TECH: Will ‘Secure Access Service Edge’ — SASE — Be the Answer to Secure Connectivity?

The Last Watchdog

DECEMBER 8, 2020

Locking down web gateways and erecting a robust firewall were considered the be-all and end-all. SD-WAN arose in 2014 as a way to use software to manage traffic moving across large networks, especially to-and-from geographically dispersed branches. Incapsula was acquired by web application firewall vendor Imperva.

Firewall

Firewall Digital transformation Internet Internet

Critical RCE affects older Diebold Nixdorf ATMs

Security Affairs

JUNE 9, 2019

The experts pointed out that this attack could be prevented by properly configuring the terminal-based firewall that is included in the older version of Opteve ATMs. the good news is that the firewall is enabled by default, this means that only ATM owners that disabled it are at risk. Pierluigi Paganini.

Firewall

Firewall Advertising Financial Services Software

Discount Rules for WooCommerce WordPress plugin gets patch once again

Security Affairs

SEPTEMBER 21, 2020

We released a firewall rule to protect against these vulnerabilities the same day.” “During our investigation, we also discovered a separate set of vulnerabilities in the plugin that were not yet patched, and released a firewall rule to protect against these separate vulnerabilities the next day, on August 21, 2020.”

Firewall

Firewall Advertising Hacking Information Security

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

Security Affairs

MARCH 31, 2020

Firewall rule released for Wordfence Premium users. April 23, 2020 – Firewall rule becomes available to Wordfence free users. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Full vulnerability disclosure sent.

Firewall

Firewall Advertising Engineering Authentication

Cyber Defense Magazine – July 2019 has arrived. Enjoy it!

Security Affairs

JULY 1, 2019

In addition, we’re shooting for 7x24x365 uptime as we continue to scale with improved Web App Firewalls, Content Deliver Networks (CDNs) around the Globe, Faster and More Secure DNS and CyberDefenseMagazineBackup.com up and running as an array of live mirror sites.

DNS

DNS Advertising Firewall Mobile

Chinese police arrested the operator of unauthorized VPN service that made $1.6 million from his activity

Security Affairs

JANUARY 17, 2020

China continues to intensify the monitoring of the cyberspace applying and persecution of VPN services that could be used to bypass its censorship system known as the Great Firewall. The Great Firewall project already blocked access to more hundreds of the world’s 1,000 top websites, including Google, Facebook, Twitter, and Dropbox.

VPN

VPN Firewall Advertising Media

Hackers target Docker servers to deploy the new Kinsing cryptocurrency miner

Security Affairs

APRIL 6, 2020

Experts also recommend to access admin endpoints only through firewall or VPN gateway. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cryptocurrency

Cryptocurrency Malware Advertising VPN

Microsoft’s case study: Emotet took down an entire network in just 8 days

Security Affairs

APRIL 4, 2020

“He’d been told the organization had an extensive system to prevent cyberattacks, but this new virus evaded all their firewalls and antivirus software. The Emotet banking trojan has been active at least since 2014, the botnet is operated by a threat actor tracked as TA542. Pierluigi Paganini. SecurityAffairs – Emotet, malware).

Antivirus

Antivirus Malware Phishing Advertising

Threat Trends: Firewall

Hackers exploit SQL injection zero-day issue in Sophos firewall

Trending Sources

Retail giant Home Depot agrees to a $17.5 million settlement over 2014 data breach

Sophos blocked attacks exploiting XG Firewall zero-day to deploy Ransomware

Cisco fixes 5 critical flaws that could allow router firewall takeover

Sophos fixed a critical vulnerability in Cyberoam firewalls

Palo Alto Networks fixes a critical flaw in firewall PAN-OS

NEW TECH: Alcide introduces a “microservices firewall” as a dynamic ‘IaaS’ market takes shape

CISA adds Sophos firewall bug to Known Exploited Vulnerabilities Catalog

335,923 out of 489,337 Fortinet firewalls vulnerable to CVE-2023-27997

Palo Alto Networks addresses tens of serious issues in PAN-OS

MyBook Users Urged to Unplug Devices from Internet

Hackers are actively exploiting critical RCE in WordPress sites using File Manager plugin

Actions Target Russian Govt. Botnet, Hydra Dark Market

FBI is warning of cyber attacks against Windows 7 systems that reached end-of-life

Palo Alto Networks addresses another high severity issue in PAN-OS devices

Snake Ransomware isolates infected Systems before encrypting files

Almost 800,000 SonicWall VPN appliances online are vulnerable to CVE-2020-5135

Security Affairs newsletter Round 501 by Pierluigi Paganini – INTERNATIONAL EDITION

Cisco addressed CVE-2019-1663 RCE flaw in wireless routers

KingComposer fixes a reflected XSS impacting 100,000 WordPress sites

New Ttint IoT botnet exploits two zero-days in Tenda routers

CVE-2020-3452 flaw in Cisco ASA/FTD exploited within hours after the disclosure

Palo Alto Networks fixes severe Code Execution and DoS flaws in PAN-OS

Siemens addresses multiple critical flaws in SINUMERIK Controllers

DoS attack the caused disruption at US power utility exploited a known flaw

Expert found a hardcoded SSH Key in Fortinet SIEM appliances

Expert released DOS Exploit PoC for Critical Windows RDP Gateway flaws

Imperva data Breach: WAF customers’ data exposed

Juniper Networks addressed many issues in its products

Microsoft accidentally reveals Wormable Win SMBv3 CVE-2020-0796 Flaw

Cyber Defense Magazine – September 2019 has arrived. Enjoy it!

Threat actors target WordPress sites using vulnerable File Manager install

Cyber Defense Magazine – August 2019 has arrived. Enjoy it!

TeamTNT is the first cryptomining bot that steals AWS credentials

Large-scale campaign targets configuration files from WordPress sites

NEW TECH: Will ‘Secure Access Service Edge’ — SASE — Be the Answer to Secure Connectivity?

Critical RCE affects older Diebold Nixdorf ATMs

Discount Rules for WooCommerce WordPress plugin gets patch once again

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

Cyber Defense Magazine – July 2019 has arrived. Enjoy it!

Chinese police arrested the operator of unauthorized VPN service that made $1.6 million from his activity

Hackers target Docker servers to deploy the new Kinsing cryptocurrency miner

Microsoft’s case study: Emotet took down an entire network in just 8 days

Stay Connected