Authentication InfoSec VPN 
Krebs on Security
JUNE 15, 2023
The directive applies to any networking devices — such as firewalls, routers and load balancers — that allow remote authentication or administration. The researchers found that just being able to reach the management interface for a vulnerable Fortinet SSL VPN appliance was enough to completely compromise the devices.
Security Affairs
AUGUST 10, 2022
Upon achieving an MFA push acceptance, the attacker had access to the VPN in the context of the targeted user. “Initial access to the Cisco VPN was achieved via the successful compromise of a Cisco employee’s personal Google account. ” reads the analysis published by Cisco Talos.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
SecureWorld News
DECEMBER 1, 2022
Training for employees (awareness). Privacy training, specifically. Well documented policies and standards for employees (data handling).
Duo's Security Blog
OCTOBER 6, 2023
Threat actors have dramatically escalated their attacks – targeting security controls like multi-factor authentication (MFA), conducting wily social engineering attacks and extorting businesses large and small with ransomware. Since then, teams have had years to adjust to this new reality, yet the attackers have as well.
Security Affairs
NOVEMBER 25, 2023
ransomfeed #security #infosec #energychina pic.twitter.com/deRRximVPd — Ransomfeed (@ransomfeed) November 25, 2023 The China Energy Engineering Corporation (CEEC) is a state-owned company in China that operates in the energy and infrastructure sectors. VPNs, RDPs) to gain initial access to the target network and maintain persistence.
Cisco Security
AUGUST 26, 2021
We constantly see new threats, and threat vectors, come and go; which puts a tremendous strain on the InfoSec teams that have to protect organizations and businesses from these threats. CyberArk reduces VPN risk with MFA enforcement on any VPN client that supports RADIUS; including Cisco Secure Firewall. Read more here.
Malwarebytes
FEBRUARY 22, 2023
According to the investigation, an attacker logged into the old VPN (virtual private network) that DDC used before migrating to a new one using a compromised employee account. The infosec program must be developed and implemented within 180 days (six months).
Expert insights. Personalized for you.
265 
Let's personalize your content