eSecurity Planet

JUNE 3, 2024

May 28, 2024 Check Point VPN Zero-Day Vulnerability Requires Hotfix Type of attack: Information disclosure zero-day. The problem: Recently discovered zero-day CVE-2024-24919 affects Check Point virtual private network (VPN) products. The vulnerability is tracked as CVE-2024-23108 and has a CVSS severity rating of 10.0.

VPN 101

VPN Authentication Passwords Software 101

eSecurity Planet

MARCH 19, 2024

March 8, 2024 150,000 Fortinet Secure Web Gateways Remain Exposed Type of vulnerability: Arbitrary code execution (ACE). The problem: The FortiOS SSL VPN feature vulnerability, CVE-2024-21762, disclosed February 8th , remains exposed to attack on nearly 150,000 devices according to the ShadowServer Foundation website.

Authentication 105

Authentication VPN Software DDOS 105

eSecurity Planet

MARCH 11, 2024

And all IT and security teams should follow vulnerability news for vendor bulletins and updates. March 4, 2024 JetBrains Server Issues Continue with New Vulnerabilities Type of vulnerability: Authentication bypass. The more severe CVE-2024-27198 allows a threat actor to take over the entire server. and iPadOS 17.4.

Authentication 105

Authentication Software VPN Security Defenses 105

eSecurity Planet

JUNE 21, 2024

VPN integration: Secures surfing sessions by combining VPN with a password manager, for private, anonymous browsing and secure connections over public WiFi. Keeper offers a wide-range of add-ons, including optional privileged access control software to improve security.

Password Management 83

Password Management Passwords Encryption VPN 83

eSecurity Planet

JANUARY 22, 2024

Make sure your security teams are regularly checking vendors’ software and hardware updates for any patches, and keep a particular eye on networking equipment. January 16, 2024 Open-Source UEFI Implementation Sees 9 Vulnerabilities Type of vulnerability: Weaknesses in the network boot process of UEFI’s network implementation.

Authentication 106

Authentication Malware VPN Mobile 106

eSecurity Planet

MAY 20, 2024

This doubles as your weekly reminder to check your IT vendors’ security bulletins regularly and patch every vulnerability as soon as you learn about it. Always prioritize creating a patch plan if your security teams haven’t developed a methodology already. This vulnerability affects natural language processing applications.

VPN 63

VPN Firmware Malware Software 63

eSecurity Planet

JANUARY 16, 2024

Keep an eye out for security announcements from your firewall vendors; it’s possible additional similar vulnerabilities will come to light. January 10, 2024 Thousands of WordPress Sites Vulnerable to Malware Injection Type of vulnerability: Cross-site scripting flaw in Popup Builder that allows a malware injection. Versions 9.x

Firewall 101

Firewall Firmware IoT Authentication 101

eSecurity Planet

SEPTEMBER 6, 2024

Security firm Proton AG (which offers an open-source password manager that is free to individual users and includes VPN service) cites these characteristics of a secure password: Length: At a minimum, a password should be 12 characters long, but 15 or more characters are recommended. You can unsubscribe at any time.

Password Management 63

Password Management Passwords Accountability Social Engineering 63

eSecurity Planet

FEBRUARY 16, 2024

In November 2021, the FBI disclosed a FatPipe VPN exploit that enabled backdoor access via web shells. In February 2024, the CISA, NSA, and FBI warned of PRC cyber actors pre-positioning themselves again to disrupt the IT networks of U.S. Want to strengthen your organization’s digital defenses?

Internet 107

Internet Internet Network Security Cybersecurity 107

eSecurity Planet

SEPTEMBER 12, 2024

A VPN provides a secure channel for users to send and retrieve sensitive data using public infrastructure – the Internet. This avoids the cost of leasing dedicated secure lines between branch offices and allows employees the flexibility to work anywhere with an Internet connection. Read on to find more answers to “What is a VPN?”

VPN 58

VPN Passwords Encryption Authentication 58

eSecurity Planet

JULY 15, 2024

To reduce the risks caused by these vulnerabilities, affected users should apply patches, upgrade software, and strengthen security measures as soon as possible. July 8, 2024 Four Unpatched Flaws Discovered in Gogs Type of vulnerability: Multiple, including argument injection and file deletion.

Authentication 95

Authentication Backups Software Risk 95

eSecurity Planet

MARCH 4, 2024

February 26, 2024 FCKeditor Used for SEO Poisoning on Government, University Sites Type of vulnerability: Malicious URL redirect. February 27, 2024 Ransomware Gangs Target Unpatched ScreenConnect Servers Type of vulnerability: Authentication bypass and path traversal. The fix: Apply Windows patches ASAP.

IoT 111

IoT Internet Internet Ransomware 111