Authentication, Passwords and VPN - Cyber Security Informer

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

MARCH 17, 2025

Key Findings Even years after their disclosure, VPN-related vulnerabilities like CVE-2018-13379 and CVE-2022-40684 remain essential tools for attackers, driving large-scale campaigns of credential theft and administrative control. How AI and automation are amplifying the scale and sophistication of VPN attacks.

VPN

VPN Authentication Ransomware Risk

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Security Affairs

NOVEMBER 19, 2024

Chinese threat actors use custom post-exploitation toolkit ‘DeepData’ to exploit FortiClient VPN zero-day and steal credentials. Volexity researchers discovered a vulnerability in Fortinet’s Windows VPN client that China-linked threat actor BrazenBamboo abused in their DEEPDATA malware. ” reads the advisory.

VPN

VPN Malware Spyware Passwords

Ukraine Nabs Suspect in 773M Password ?Megabreach?

Krebs on Security

MAY 19, 2020

In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” By far the most important passwords are those protecting our email inbox(es).

Passwords

Passwords Accountability Hacking Password Management

Feds Charge Five Men in ‘Scattered Spider’ Roundup

Krebs on Security

NOVEMBER 21, 2024

The targeted SMS scams asked employees to click a link and log in at a website that mimicked their employer’s Okta authentication page. Some SMS phishing messages told employees their VPN credentials were expiring and needed to be changed; other phishing messages advised employees about changes to their upcoming work schedule.

Identity Theft

Identity Theft Phishing Cryptocurrency Accountability

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Krebs on Security

AUGUST 21, 2020

The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. authenticate the phone call before sensitive information can be discussed.

VPN

VPN Social Engineering Authentication Engineering

Attackers exploited SonicWall SMA appliances since January 2025

Security Affairs

APRIL 19, 2025

A remote authenticated attacker can exploit the flaw to inject arbitrary commands as a nobody user, which could potentially lead to arbitrary code execution. Arctic Wolf has uncovered an active campaign, running from January to April 2025, targeting SonicWall SMA 100 series appliances to steal VPN credentials.

Passwords

Passwords VPN Firewall Accountability

SHARED INTEL: Coming very soon — ‘passwordless authentication’ as a de facto security practice

The Last Watchdog

NOVEMBER 11, 2020

As a tradeoff for enjoying our digital lives, we’ve learned to live with password overload and even tolerate two-factor authentication. But now, at long last, we’re on the brink of eliminating passwords altogether, once and for all. Password tradeoffs Passwords have always been a big pain.

Authentication

Authentication VPN Passwords Hacking

International law enforcement operation dismantled RedLine and Meta infostealers

Security Affairs

OCTOBER 29, 2024

The two infostealers allowed operators to harvest usernames, passwords, contact info, and crypto-wallets from victims, the threat actors sold this data to criminals for financial theft and hacking. Use a password manager : Simplifies managing strong, unique passwords across accounts.

Identity Theft

Identity Theft Passwords Malware Banking

Cisco warns of password-spraying attacks targeting Secure Firewall devices

Security Affairs

MARCH 29, 2024

Cisco warns customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services of Cisco Secure Firewall devices. Cisco is warning customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

Firewall

Firewall Passwords VPN Authentication

Check Point released hotfix for actively exploited VPN zero-day

Security Affairs

MAY 29, 2024

Check Point released hotfixes for a VPN zero-day vulnerability, tracked as CVE-2024-24919, which is actively exploited in attacks in the wild. Check Point released hotfixes to address a VPN zero-day vulnerability, tracked as CVE-2024-24919 , which is actively being exploited in attacks in the wild.

VPN

VPN Passwords Authentication Accountability

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

Krebs on Security

NOVEMBER 21, 2020

“At this moment in time, it looks like no emails, passwords, or any personal data were accessed, but we do suggest resetting your password and activate 2FA security,” the company wrote in a blog post. Restrict VPN access hours, where applicable, to mitigate access outside of allowed times.

Cryptocurrency

Cryptocurrency VPN Scams Social Engineering

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security Affairs

OCTOBER 25, 2024

is a Denial of Service (DoS) issue that impacts the Remote Access VPN (RAVPN) service of ASA and FTD. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. Services that are not related to VPN are not affected.” continues the advisory.

VPN

VPN Firewall Technology Passwords

Check Point Warns of Hackers Targeting Its Remote Access VPN

SecureWorld News

MAY 28, 2024

Threat actors are targeting Check Point Remote Access VPN devices in an ongoing campaign to breach enterprise networks, the company has warned in a new advisory. We have recently witnessed compromised VPN solutions, including various cyber security vendors.

VPN

VPN Passwords Authentication Architecture

ASUS routers with AiCloud vulnerable to auth bypass exploit

Security Affairs

APRIL 18, 2025

ASUS warns of an authentication bypass vulnerability in routers with AiCloud enabled that could allow unauthorized execution of functions on the device. ASUS warns of an authentication bypass vulnerability, tracked as CVE-2025-2492 (CVSS v4 score: 9.2), which impacts routers with AiCloud enabled.

Firmware

Firmware Authentication Passwords VPN

Voice Phishers Targeting Corporate VPNs

Krebs on Security

AUGUST 19, 2020

But one increasingly brazen group of crooks is taking your standard phishing attack to the next level, marketing a voice phishing service that uses a combination of one-on-one phone calls and custom phishing sites to steal VPN credentials from employees. The employee phishing page bofaticket[.]com. Image: urlscan.io. ” SPEAR VISHING.

Phishing

Phishing VPN Social Engineering Media

Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

Security Affairs

AUGUST 31, 2023

Cisco is aware of attacks conducted by Akira ransomware threat actors targeting Cisco ASA VPNs that are not configured for multi-factor authentication. “This highlights the importance of enabling multi-factor authentication (MFA) in VPN implementations. . ” reads a post published by Cisco PSIRT.

Authentication

Authentication Ransomware VPN Hacking

Making Seamless Authentication a Reality for MSP Customers

Duo's Security Blog

APRIL 3, 2025

Users dont like passwords and logging in, period. MSPs should like passwords even less since, according to Gartner , 40% of all help desk calls are related to password resets. While this may avoid authentication fatigue, it certainly risks and may even violate some security standards.

Authentication

Authentication Passwords Risk VPN

Revolutionizing Cisco VPN Access with Duo SSO

Duo's Security Blog

JANUARY 11, 2024

Secure Cisco VPN logins in less than an hour Authenticate users in seconds Verify user + device posture Blog unmanaged devices Mitigate modern security threats with phishing-resistant authentication Join the thousands of Cisco firewall customers who take advantage of protecting Cisco VPN logins with Cisco Duo Single Sign-On via SAML 2.0

VPN

VPN Authentication Firewall Risk

Bad Consumer Security Advice

Schneier on Security

DECEMBER 4, 2018

To remain anonymous and secure on the Internet, invest in a Virtual Private Network account, but remember, the bad guys are very smart, so by the time this column runs, they may have figured out a way to hack into a VPN. I think twice about accessing my online bank account from a pubic Wi-Fi network, and I do use a VPN regularly.

Accountability

Accountability Passwords VPN Mobile

Zyxel firewalls targeted in recent ransomware attacks

Security Affairs

NOVEMBER 25, 2024

According to the advisory, the attack is only possible if the device is configured to use User-Based-PSK authentication and has a valid user with a username longer than 28 characters. for ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN series. . for ATP, USG FLEX, and USG FLEX 50(W)/USG20(W)-VPN series.

Firewall

Firewall Ransomware VPN Firmware

APT groups chain VPN and Windows Zerologon bugs to attack US government networks

Security Affairs

OCTOBER 12, 2020

US government networks are under attack, threat actors chained VPN and Windows Zerologon flaws to gain unauthorized access to elections support systems. An attacker could also exploit the flaw to disable security features in the Netlogon authentication process and change a computer’s password on the domain controller’s Active Directory.

VPN

VPN Government Authentication Advertising

BEST PRACTICES – 9 must-do security protocols companies must embrace to stem remote work risks

The Last Watchdog

MARCH 6, 2021

Use strong passwords. It is essential to ensure that all accounts are protected with strong passwords. To this day, a significant amount of people still use the password across multiple accounts, which makes it much simpler for a cybercriminal to compromise a password and take over accounts. Secure home router.

VPN

VPN Passwords Firewall Risk

The global impact of the Fortinet 50.000 VPN leak posted online

Security Affairs

NOVEMBER 27, 2020

The global impact of the Fortinet 50.000 VPN leak posted online, with many countries impacted, including Portugal. A compilation of one-line exploit tracked as CVE-2018-13379 and that could be used to steal VPN credentials from nearly 50.000 Fortinet VPN devices has posted online. Affected Products FortiOS 6.0 – 6.0.0

VPN

VPN Banking Passwords Malware

Announcing Duo’s Vision to Streamline Authentication & Enhance User Experience

Duo's Security Blog

JUNE 8, 2023

Some of it is positive, but the general consensus is that people don’t love multi-factor authentication (MFA); they see it as a necessary evil at best. That’s why I’m so excited to announce our vision to streamline Duo’s authentication workflows, a feature that will deliver seamless, secure login experiences.

Authentication

Authentication VPN System Administration Engineering

When Low-Tech Hacks Cause High-Impact Breaches

Krebs on Security

FEBRUARY 26, 2023

million customers, including website administrator passwords, sFTP credentials, and private SSL keys; -December 2022: Hackers gained access to and installed malware on GoDaddy’s cPanel hosting servers that “intermittently redirected random customer websites to malicious sites.”

Hacking

Hacking Social Engineering Phishing Scams

Why you should act like your CEO’s password is “querty”

Malwarebytes

MAY 20, 2022

A poor password at the highest levels of an organisation can cost a company millions in losses. Recent findings show that half of IT leaders store passwords in shared documents. On top of that, it seems that folks at executive level are not picking good passwords either. Are CEOs naming their passwords after themselves?

Passwords

Passwords Password Management Authentication VPN

Secure Access for Remote Workers: RDP, VPN & VDI

eSecurity Planet

NOVEMBER 4, 2021

We use passwords to authenticate our users, run antivirus to keep malware off our endpoints , monitor our networks, and implement firewalls so we can have multiple defenses against attackers. VPNs: An Imperfect Solution. A fundamental cornerstone of security is layers. RDP: A Pre-Cloud Solution.

VPN

VPN Firewall Encryption Passwords

Strong Authentication – Robust Identity and Access Management Is a Strategic Choice

Security Affairs

JULY 29, 2022

Passwords no longer meet the demands of today’s identity and access requirements. Therefore, strong authentication methods are needed. Therefore, strong authentication methods are needed. Passwords no longer meet the demands of today’s identity and access requirements. What is Strong Authentication?

Authentication

Authentication Passwords Data privacy Identity Theft

Experian, You Have Some Explaining to Do

Krebs on Security

JULY 10, 2022

In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Turner said he created the account at Experian in 2020 to place a security freeze on his credit file, and that he used a password manager to select and store a strong, unique password for his Experian account.

Accountability

Accountability Passwords Authentication Password Management

Beware password-spraying fancy bears

Malwarebytes

JULY 2, 2021

Some attacks used known vulnerabilities that allowed remote code execution (RCE), while others started by trying to identify valid credentials through password spraying. The applications in the cluster used TOR and commercial VPN services to avoid revealing their IP addresses. Aim for strong passwords, but plan for bad ones.

Passwords

Passwords Authentication Government VPN

8 security tips for small businesses

Malwarebytes

NOVEMBER 6, 2024

Lock things down Having a strict policy to protect your important assets with strong passwords and multi-factor authentication (MFA) should be a no-brainer. Consider making it easier for your staff by using a single-sign-on service or alternatively by providing them with a password manager.

Small Business

Small Business Backups Firewall VPN

Gift Card Gang Extracts Cash From 100k Inboxes Daily

Krebs on Security

SEPTEMBER 2, 2021

For the past three years, the source — we’ll call him “Bill” to preserve his requested anonymity — has been watching one group of threat actors that is mass-testing millions of usernames and passwords against the world’s major email providers each day.

Accountability

Accountability Authentication Passwords Hacking

Legacy Authentication Protocols: Why RADIUS Is (Still) Important

Duo's Security Blog

MAY 23, 2024

When reading the title of this blog, you might be wondering to yourself why RADIUS is being highlighted as a subject — especially amidst all of the advancements of modern authentication we see taking place recently. It is commonly used for network access into VPNs, wireless access points, and other devices (more on this later).

Authentication

Authentication Wireless Passwords Encryption

8 Best Password Management Software & Tools for 2022

eSecurity Planet

SEPTEMBER 19, 2022

Since many people use the same passwords or patterns when generating passwords, hackers have more and more opportunities to gain access to sensitive company data. Password manager tools allow organizations and their employees to seamlessly and securely handle login credentials. Best Password Manager Tools.

Password Management

Password Management Passwords Software Encryption

1 in 10 people do nothing to stay secure and private on vacation

Malwarebytes

MARCH 17, 2025

If enough victims unwittingly send their passwords, cyber thieves could bundle the login credentials for sale on the dark web. That said, it’s inspiring to see that 41% of people “download or install a VPN” to provide an extra level of security when browsing on public Wi-Fi. Use a password manager and 2FA.

VPN

VPN Passwords Scams Backups

What Is Two-Factor Authentication (2FA) and Why Should You Use It?

IT Security Guru

OCTOBER 26, 2023

Security is crucial, but let’s face it, a password like “Fluffy123” won’t fool anyone for long. Enter Two-Factor Authentication, or 2FA for short. The first is something you know (your password), and the second is something you have (like your phone). With 2FA enabled, you’ll first enter your password.

Authentication

Authentication Passwords Mobile VPN

National Public Data leaked passwords online

Malwarebytes

AUGUST 21, 2024

As if that wasn’t bad enough, KrebsOnSecurity is now reporting on another National Public Data company found hosting a file online that included the usernames and passwords for the back-end of its website, including for the site’s administrator. Change your password. Better yet, let a password manager choose one for you.

Passwords

Passwords Data breaches Phishing Password Management

No, I Won't Link to Your Spammy Article

Troy Hunt

APRIL 6, 2020

The Ultimate Tor Browser Guide for 2020 The Best VPN for China 2020 How to know if someone is watching you on your camera 5 Ways to Stay Protected from Advanced Phishing Threats How to Access Windows Remote Desktop Over the Internet What We Need To Know About Bluetooth Security The Best Internet Browser for 2020 Two-Factor Authentication: ?What

Advertising

Advertising Internet Internet VPN

The Original APT: Advanced Persistent Teenagers

Krebs on Security

APRIL 6, 2022

“They would just keep jamming a few individuals to get [remote] access, read some onboarding documents, enroll a new 2FA [two-factor authentication method] and exfiltrate code or secrets, like a smash-and-grab,” the CXO said. “These guys were not leet , just damn persistent.” ” HOW DID WE GET HERE?

Social Engineering

Social Engineering Phishing Engineering Accountability

NordLayer Review: A VPN for the Zero Trust Era

eSecurity Planet

JUNE 22, 2022

However, many of these VPN solutions have three significant issues. First, VPNs can be difficult to set up, secure and maintain. Second, VPNs do not scale well and can become congested. Users might decide to bypass the hassle of VPNs and access those cloud resources directly without any additional security protection.

VPN

VPN Authentication Small Business Encryption

Top 15 Exploited Vulnerabilities of 2023

SecureWorld News

NOVEMBER 12, 2024

CVE-2023-20198 (Cisco IOS XE Web UI): This vulnerability allows unauthorized users to gain initial access and issue a command to create a local user and password combination, resulting in the ability to log in with standard user access. CVE-2020-1472 (Microsoft Netlogon): Allows privilege escalation.

Software

Software Passwords Cyber threats Risk

Akira Ransomware Targeting VPNs without Multi-Factor Authentication

Cisco Security

AUGUST 24, 2023

Cisco is aware of reports that Akira ransomware threat actors have been targeting Cisco VPNs that are not configured for multi-factor authentication to infiltrate organizations, and we have observed instances where threat actors appear to be targeting organizations that do not configure multi-factor authentication for their VPN users.

Authentication

Authentication Ransomware VPN Passwords

Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

NOVEMBER 3, 2024

Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cryptocurrency

Cryptocurrency Hacking Phishing Cyber Attacks

RockYou2024: Nearly 10 Billion Passwords Exposed in Data Leak

Identity IQ

JULY 8, 2024

RockYou2024: Nearly 10 Billion Passwords Exposed in Data Leak IdentityIQ In a cybersecurity incident that has sent shockwaves through the online community, nearly 10 billion unique passwords have been exposed in the “RockYou2024” data breach. billion passwords. .” billion passwords. The additional 1.5

Passwords

Passwords Identity Theft Data breaches Password Management

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

China-linked actor’s malware DeepData exploits FortiClient VPN zero-day

Trending Sources

Ukraine Nabs Suspect in 773M Password ?Megabreach?

Feds Charge Five Men in ‘Scattered Spider’ Roundup

FBI, CISA Echo Warnings on ‘Vishing’ Threat

Attackers exploited SonicWall SMA appliances since January 2025

SHARED INTEL: Coming very soon — ‘passwordless authentication’ as a de facto security practice

International law enforcement operation dismantled RedLine and Meta infostealers

Cisco warns of password-spraying attacks targeting Secure Firewall devices

Check Point released hotfix for actively exploited VPN zero-day

GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Check Point Warns of Hackers Targeting Its Remote Access VPN

ASUS routers with AiCloud vulnerable to auth bypass exploit

Voice Phishers Targeting Corporate VPNs

Akira Ransomware gang targets Cisco ASA without Multi-Factor Authentication

Making Seamless Authentication a Reality for MSP Customers

Revolutionizing Cisco VPN Access with Duo SSO

Bad Consumer Security Advice

Zyxel firewalls targeted in recent ransomware attacks

APT groups chain VPN and Windows Zerologon bugs to attack US government networks

BEST PRACTICES – 9 must-do security protocols companies must embrace to stem remote work risks

The global impact of the Fortinet 50.000 VPN leak posted online

Announcing Duo’s Vision to Streamline Authentication & Enhance User Experience

When Low-Tech Hacks Cause High-Impact Breaches

Why you should act like your CEO’s password is “querty”

Secure Access for Remote Workers: RDP, VPN & VDI

Strong Authentication – Robust Identity and Access Management Is a Strategic Choice

Experian, You Have Some Explaining to Do

Beware password-spraying fancy bears

8 security tips for small businesses

Gift Card Gang Extracts Cash From 100k Inboxes Daily

Legacy Authentication Protocols: Why RADIUS Is (Still) Important

8 Best Password Management Software & Tools for 2022

1 in 10 people do nothing to stay secure and private on vacation

What Is Two-Factor Authentication (2FA) and Why Should You Use It?

National Public Data leaked passwords online

No, I Won't Link to Your Spammy Article

The Original APT: Advanced Persistent Teenagers

NordLayer Review: A VPN for the Zero Trust Era

Top 15 Exploited Vulnerabilities of 2023

Akira Ransomware Targeting VPNs without Multi-Factor Authentication

Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

RockYou2024: Nearly 10 Billion Passwords Exposed in Data Leak

Stay Connected