Security Affairs

DECEMBER 27, 2024

Palo Alto Networks addressed a high-severity flaw, tracked as CVE-2024-3393 (CVSS score: 8.7), in PAN-OS software that could cause a denial-of-service (DoS) condition. An unauthenticated attacker can exploit this vulnerability to reboot the firewall by sending a malicious packet through its data plane. ” reads the advisory.

DNS 112

DNS Firewall Spyware Software 112

eSecurity Planet

JANUARY 16, 2024

Keep an eye out for security announcements from your firewall vendors; it’s possible additional similar vulnerabilities will come to light. January 10, 2024 Thousands of WordPress Sites Vulnerable to Malware Injection Type of vulnerability: Cross-site scripting flaw in Popup Builder that allows a malware injection. Versions 9.x

Firewall 101

Firewall Firmware IoT Authentication 101

Security Affairs

NOVEMBER 7, 2024

Google as usual did not share details about the attacks exploiting the above vulnerability, however, it added that another issue, tracked as CVE-2024-43047, is actively exploited in the wild. CVE-2024-43093 CVE-2024-43047″ reads the security bulletin published by Google. Versions up to 2.3.6 and unpatched 2.3.7

Firewall 125

Firewall Authentication Accountability Risk 125

Security Affairs

DECEMBER 20, 2024

Sophos fixed three Sophos Firewall flaws that could lead to SQL injection, privileged SSH access to devices, and remote code execution. Sophos has addressed three vulnerabilities, respectively tracked as CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729, in its Sophos Firewall solution. GA (21.0.0) GA (21.0.0)

Firewall 62

Firewall Authentication Passwords Accountability 62

Security Affairs

NOVEMBER 25, 2024

Zyxel warns that a ransomware group has been observed exploiting a recently patched command injection issue in its firewalls. Zyxel warns that a ransomware gang has been observed exploiting a recently patched command injection vulnerability, tracked as CVE-2024-42057, in its firewalls for initial compromise.

Firewall 74

Firewall Ransomware VPN Firmware 74

eSecurity Planet

OCTOBER 7, 2021

The network firewall is the first line of defense for traffic that passes in and out of a network. The firewall examines traffic to ensure it meets the security requirements set by the organization, and unauthorized access attempts are blocked. Firewall protection has come a long way in recent years. Next-generation firewalls.

Firewall 96

Firewall Marketing Technology Social Engineering 96

Security Affairs

NOVEMBER 8, 2024

Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS.

Firewall 116

Firewall Authentication Internet Internet 116

Security Affairs

JULY 12, 2024

Palo Alto Networks addressed five vulnerabilities impacting its products, including a critical authentication bypass issue. Palo Alto Networks Expedition is a tool designed to help users transition to and optimize Palo Alto Networks’ next-generation firewalls. >= 7.9.102-CE 2024-07-10 2024-07-10 5.4

Authentication 131

Authentication Firewall Accountability Hacking 131

Security Affairs

NOVEMBER 15, 2024

The vulnerabilities reside in the Palo Alto Networks’ Expedition solution, which is a migration tool designed to help organizations move configurations from other firewall platforms (like Check Point, Cisco, and others) to Palo Alto’s PAN-OS. reads the advisory. The vulnerabilities impact Expedition versions prior to 1.2.96.

Firewall 109

Firewall Passwords Authentication Phishing 109

Security Affairs

OCTOBER 24, 2024

Cisco addressed multiple vulnerabilities in Adaptive Security Appliance (ASA), Secure Firewall Management Center (FMC), and Firepower Threat Defense (FTD) products, including an actively exploited flaw tracked as CVE-2024-20481. The vulnerability CVE-2024-20481 (CVSS score of 5.8) ” reads the advisory.

VPN 122

VPN Firewall Passwords Software 122

Security Affairs

APRIL 28, 2024

Another severe issue is related to the presence of Hardcoded Docker Keys tracked as CVE-2024-29963 (CVSS score of 8.6). The patches were released in April 2024, 19 months after Brocade firstly rejected the vulnerabilities and 11 months after Brocade acknowledged the vulnerabilities. Brocade SANnav OVA before v2.3.1,

Firewall 123

Firewall Authentication Backups Architecture 123

SecureList

DECEMBER 6, 2024

Q3 2024 saw multiple vulnerabilities discovered in Windows and Linux subsystems that are not standard for cyberattacks. Total number of registered vulnerabilities and number of critical ones, Q3 2023 and Q3 2024 ( download ) Q3 2024 preserved the upward trend in the number of vulnerabilities detected and registered.

Authentication 94

Authentication Software Wireless Internet 94

Security Affairs

APRIL 15, 2024

Threat actors have been exploiting the recently disclosed zero-day in Palo Alto Networks PAN-OS since March 26, 2024. Palo Alto Networks and Unit 42 are investigating the activity related to CVE-2024-3400 PAN-OS flaw and discovered that threat actors have been exploiting it since March 26, 2024. This flaw impacts PAN-OS 10.2,

Firewall 136

Firewall Hacking Authentication Software 136

Security Affairs

AUGUST 25, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added Versa Director Dangerous File Type Upload Vulnerability CVE-2024-39717 (CVSS score: 6.6) Exploitation requires successful authentication by a user with the necessary privileges. CISA orders federal agencies to fix this vulnerability by September 13, 2024.

Firewall 126

Firewall Authentication Hacking Cybersecurity 126

Security Affairs

APRIL 16, 2024

Cisco Talos warns of large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services.

VPN 140

VPN Firewall Authentication Hacking 140

Security Affairs

MAY 29, 2024

Check Point released hotfixes for a VPN zero-day vulnerability, tracked as CVE-2024-24919, which is actively exploited in attacks in the wild. Check Point released hotfixes to address a VPN zero-day vulnerability, tracked as CVE-2024-24919 , which is actively being exploited in attacks in the wild. Impacted versions are R80.20.x,

VPN 125

VPN Authentication Passwords Accountability 125

The Last Watchdog

NOVEMBER 12, 2023

Here are my takeaways: Matter picks up steam Frustration with smart home devices should be much reduced in 2024. Matter works much the way website authentication and website traffic encryption gets executed. DMARC is a robust email authentication protocol that has been around for more than a decade.

Manufacturing 276

Manufacturing Authentication Marketing Encryption 276

Security Affairs

NOVEMBER 19, 2024

CVE-2024-0012 is a vulnerability in Palo Alto Networks PAN-OS that allows unauthenticated attackers with network access to the management web interface to bypass authentication and gain administrator privileges. CISA orders federal agencies to fix this vulnerability by December 5, 2024. The issue affects PAN-OS versions 10.2,

Authentication 109

Authentication Firewall Risk Hacking 109

SecureList

MAY 7, 2024

Additionally, we take a close look at several noteworthy vulnerabilities discovered in Q1 2024. The number of newly registered CVEs, 2019 — 2024. The decline in 2024 is due to data being available for Q1 only ( download ) As the chart illustrates, the number of new vulnerabilities has been steadily increasing year over year.

Software 113

Software Internet Internet Social Engineering 113

eSecurity Planet

DECEMBER 19, 2023

Various forms of AI, such as machine learning (ML) and large language models (LLM), already dominated headlines throughout 2023 and will continue to present both overhyped possibilities and realized potential in 2024. In 2024, AI poisoning attacks will become the new software supply chain attacks.

Cybersecurity 139

Cybersecurity CISO Government Technology 139

Security Affairs

AUGUST 2, 2024

Cybersecurity and Infrastructure Security Agency (CISA) published an advisory to warn of a vulnerability, tracked as CVE-2024-7029 (CVSS base score of 8.8), in Avtech camera that has been exploited in the wild. “Commands can be injected over the network and executed without authentication.”

Firmware 128

Firmware Firewall Risk Authentication 128

Security Affairs

NOVEMBER 8, 2024

Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS.

Firewall 102

Firewall Authentication Internet Internet 102

Security Affairs

OCTOBER 25, 2024

The vulnerability CVE-2024-20481 (CVSS score of 5.8) An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. Cisco warned customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

VPN 112

VPN Firewall Technology Passwords 112

Security Affairs

APRIL 28, 2024

From March 18, 2024, to April 16, 2024, Duo Security and Cisco Talos observed large-scale brute-force attacks against a variety of targets, including VPN services, web application authentication interfaces and SSH services. .” reads the advisory published by Okta.

VPN 139

VPN Accountability Firewall Data breaches 139

Pen Test Partners

JULY 1, 2024

TL;DR The Qualys Threat Research Unit has found a high-severity vulnerability, filed under CVE-2024-6387, affects OpenSSH (Open Secure Shell), a networking utility often used for remote server management and secure communication over insecure networks. CVE-2024-6387 affects the OpenSSH server on glibc-based Linux systems.

InfoSec 83

InfoSec Authentication VPN Firewall 83

Security Affairs

APRIL 25, 2024

Early in 2024, a customer contacted Cisco to report a suspicious related to its Cisco Adaptive Security Appliances (ASA). By redirecting the pointer to the Line Dancer interpreter, attackers can interact with the device through POST requests without authentication. Simon Garrelou from the Airbus CERT discovered the vulnerability.

VPN 133

VPN Software Firewall Authentication 133

eSecurity Planet

MAY 2, 2024

Most organizations express confidence in their current status and budgets, but also expect to experience at least one data breach in 2024. Multi-factor authentication : Protects stolen credentials against use by requiring more than a simple username and password combination for access to resources. globally, +19.8%

Cybersecurity 103

Cybersecurity DDOS Penetration Testing Passwords 103

Thales Cloud Protection & Licensing

DECEMBER 13, 2024

Thales and Imperva Win Big in 2024 madhav Fri, 12/13/2024 - 08:36 At Thales and Imperva, we are driven by our commitment to make the world safer, and nothing brings us more satisfaction than protecting our customers from daily cybersecurity threats. But that doesnt mean we dont appreciate winning the occasional award.

InfoSec 62

InfoSec Authentication Marketing B2B 62

Security Affairs

AUGUST 27, 2024

China-linked APT Volt Typhoon exploited a zero-day vulnerability, tracked as CVE-2024-39717 , in Versa Director, to deploy a custom webshell on breached networks. Exploitation requires successful authentication by a user with the necessary privileges. Versa Director servers between June 12 and mid-July 2024.

Energy and Utilities 130

Energy and Utilities Firewall Technology Malware 130

eSecurity Planet

APRIL 15, 2024

You can strengthen your cybersecurity defenses by using reliable antivirus software, firewalls, intrusion detection systems, and virtual private networks (VPNs). Employ robust password management techniques, two-factor authentication (2FA), and regular backups of essential data. Consider exploring virtual desktop infrastructure.

Firewall 102

Firewall VPN Software Risk 102

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 131

VPN Cybercrime Ransomware Hacking 131

Thales Cloud Protection & Licensing

MARCH 6, 2024

API Security in 2024: Imperva Report Uncovers Rising Threats and the Urgent Need for Action madhav Thu, 03/07/2024 - 04:56 APIs (Application Programming Interfaces) are the backbone of modern digital innovation. They drive seamless connectivity, enable rapid development, and power countless business-critical applications.

Risk 87

Risk Financial Services Authentication DDOS 87

CyberSecurity Insiders

MAY 6, 2021

Its website security plans offer SSL Certification that arrives with Web Application Firewall(WAF) protection. Also, the firewall offered by the company blocks all kinds of DDoS and Malware attacks that could damage the website- thus the reputation of the company.

Passwords 128

Passwords Firewall DDOS Malware 128

Malwarebytes

FEBRUARY 23, 2024

CVE-2024-21722 : The multi-factor authentication (MFA) management features did not properly terminate existing user sessions when a user’s MFA methods have been modified. CVE-2024-21723 : Inadequate parsing of URLs could result into an open redirect. Secure accounts with two-factor authentication ( 2FA ).

Authentication 117

Authentication Firewall Risk Media 117

The Last Watchdog

JULY 31, 2024

billion Advancements have included everything from sandboxing and web applications firewalls (WAFs,) early on, to secure web gateways (SWGs) and Virtual Desktop Infrastructure (VDIs,) more recently. Related: Island valued at $3.5 I recently visited with Uy Huynh , vice president of solutions engineering, at Dallas, Tex.

Threat Detection 130

Threat Detection Firewall Engineering Authentication 130

Security Affairs

MARCH 2, 2024

US CISA, the FBI, and MS-ISAC issued a joint CSA to warn of attacks involving Phobos ransomware variants observed as recently as February 2024 US CISA, the FBI, and MS-ISAC issued a joint cyber security advisory (CSA) to warn of attacks involving Phobos ransomware variants such as Backmydata , Devos, Eight, Elking, and Faust.

Ransomware 141

Ransomware Backups Healthcare Firewall 141

Security Boulevard

SEPTEMBER 30, 2024

Cybersecurity Awareness Month 2024: The Top Four Ways to Secure Our World madhav Tue, 10/01/2024 - 06:44 Cybersecurity Awareness Month is an international initiative that focuses on simple ways to protect ourselves, our families, and our businesses from online threats.

Cybersecurity 75

Cybersecurity Password Management Passwords Phishing 75