Security Affairs

JANUARY 15, 2024

Researchers from Bishop Fox found over 178,000 SonicWall next-generation firewalls (NGFW) publicly exploitable. Researchers from Bishop Fox used BinaryEdge source data to find SonicWall firewalls with management interfaces exposed to the internet.

Firewall 145

Firewall Hacking Firmware Internet 145

Security Affairs

AUGUST 26, 2024

SonicWall addressed a critical flaw in its firewalls that could allow attackers to achieve unauthorized access to the devices. SonicWall has released security updates to address a critical vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), in its firewalls. 13o Gen 6 Firewalls – 6.5.2.8-2n 5035 and older versions.”

Firewall 132

Firewall Firmware Malware Internet 132

The Hacker News

NOVEMBER 16, 2024

Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a new zero-day vulnerability impacting its PAN-OS firewall management interface has been actively exploited in the wild.

Firewall 143

Firewall Network Security 143

Bleeping Computer

JANUARY 12, 2024

Juniper Networks has released security updates to fix a critical pre-auth remote code execution (RCE) vulnerability in its SRX Series firewalls and EX Series switches. [.]

Firewall 140

Firewall 140

Security Affairs

DECEMBER 15, 2023

Security flaws in Netgate pfSense firewall solution can potentially lead to arbitrary code execution on vulnerable devices. pfSense is a popular open-source firewall solution maintained by Netgate, researchers discovered multiple security issues affecting it. ” reads the analysis published by SonarSource. and pfSense Plus 23.09.

Firewall 143

Firewall Phishing Authentication Hacking 143

The Hacker News

MAY 30, 2024

The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its exploit arsenal.

Firewall 139

Firewall Malware Cryptocurrency 139

Security Affairs

DECEMBER 11, 2024

has charged a Chinese national for hacking thousands of Sophos firewall devices worldwide in 2020. has charged the Chinese national Guan Tianfeng (aka gbigmao and gxiaomao) for hacking thousands of Sophos firewall devices worldwide in 2020. It was designed to download payloads intended to exfiltrate XG Firewall-resident data.

Firewall 83

Firewall Hacking Malware Passwords 83

The Hacker News

AUGUST 26, 2024

SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug. "An

Firewall 138

Firewall 138

Security Affairs

MAY 1, 2024

The threat actors appear to have the capability to control China’s Great Firewall and were observed utilizing a novel technique involving fake DNS MX records. The experts noticed a spike in activity observed in September 2023. However, the Infoblox researchers have yet to discover the motivation behind the attacks.

DNS 143

DNS Firewall DDOS Hacking 143

Penetration Testing

AUGUST 22, 2024

The vulnerability, which carries a CVSS score... The post SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766) appeared first on Cybersecurity News.

Firewall 137

Firewall Network Security Cybersecurity 137

Security Affairs

MARCH 29, 2024

Cisco warns customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services of Cisco Secure Firewall devices. Cisco is warning customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

Firewall 137

Firewall Passwords VPN Authentication 137

The Hacker News

DECEMBER 15, 2023

Multiple security vulnerabilities have been discovered in the open-source Netgate pfSense firewall solution called pfSense that could be chained by an attacker to execute arbitrary commands on susceptible appliances.

Firewall 145

Firewall Software 145

Security Boulevard

JULY 30, 2024

Firewalls and VPN appliances are critical gateways. Like all on-prem systems, a vulnerability can lead to a compromise that is used to open the door for attackers. The post If You are Reachable, You Are Breachable, and Firewalls & VPNs are the Front Door appeared first on Security Boulevard.

Firewall 122

Firewall VPN Security Awareness Cybersecurity 122

Security Affairs

NOVEMBER 25, 2024

Zyxel warns that a ransomware group has been observed exploiting a recently patched command injection issue in its firewalls. Zyxel warns that a ransomware gang has been observed exploiting a recently patched command injection vulnerability, tracked as CVE-2024-42057, in its firewalls for initial compromise.

Firewall 82

Firewall Ransomware VPN Firmware 82

Security Boulevard

AUGUST 13, 2024

One often overlooked aspect in the aftermath of a breach is the meticulous examination of firewall rule histories. The post The Crucial Role of Firewall Rule Histories appeared first on Security Boulevard.

Firewall 104

Firewall Security Awareness Cybersecurity 104

Security Affairs

JANUARY 12, 2024

Juniper Networks fixed a critical pre-auth remote code execution (RCE) flaw, tracked as CVE-2024-21591, in its SRX Series firewalls and EX Series switches. ” reads the advisory published by the vendor. “This issue is caused by use of an insecure function allowing an attacker to overwrite arbitrary memory.”

Firewall 139

Firewall Hacking Software Information Security 139

Security Affairs

OCTOBER 9, 2024

Palo Alto fixed critical flaws in PAN-OS firewalls, warning that attackers could chain these vulnerabilities to hijack the devices. Palo Alto Networks addressed multiple vulnerabilities that an attacker can chain to hijack PAN-OS firewalls. ” reads the advisory. ” reads the advisory.

Firewall 135

Firewall Passwords Authentication Phishing 135

Bleeping Computer

APRIL 12, 2024

Today, Palo Alto Networks warns that an unpatched critical command injection vulnerability in its PAN-OS firewall is being actively exploited in attacks. [.]

Firewall 129

Firewall 129

Security Affairs

NOVEMBER 21, 2024

Threat actors already hacked thousands of Palo Alto Networks firewalls exploiting recently patched zero-day vulnerabilities. Thousands of Palo Alto Networks firewalls have reportedly been compromised in attacks exploiting recently patched zero-day vulnerabilities ( CVE-2024-0012 and CVE-2024-9474 ) in PAN-OS. This week, the U.S.

Firewall 119

Firewall Hacking VPN Cybersecurity 119

Security Affairs

APRIL 24, 2024

Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November 2023 to breach government networks.

Firewall 138

Firewall Government VPN Authentication 138

Cisco Security

OCTOBER 17, 2024

Cisco is proud to be recognized as a leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024. Cisco is proud to be recognized as a leader in The Forrester Wave™: Enterprise Firewall Solutions, Q4 2024. Learn more about what sets Cisco apart. Learn more about what sets Cisco apart.

Firewall 90

Firewall 90

Security Affairs

DECEMBER 3, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog. are vulnerable to XXE attacks, allowing unauthenticated attackers to read server files with account data.

Firewall 119

Firewall Authentication Accountability Firmware 119

Security Affairs

DECEMBER 20, 2024

Sophos fixed three Sophos Firewall flaws that could lead to SQL injection, privileged SSH access to devices, and remote code execution. Sophos has addressed three vulnerabilities, respectively tracked as CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729, in its Sophos Firewall solution. GA (21.0.0) GA (21.0.0) of devices.

Firewall 63

Firewall Authentication Passwords Accountability 63

The Hacker News

DECEMBER 20, 2024

Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild.

Firewall 82

Firewall 82

WIRED Threat Level

APRIL 24, 2024

Sources suspect China is behind the targeted exploitation of two zero-day vulnerabilities in Cisco’s security appliances.

Firewall 144

Firewall Government Hacking 144

Schneier on Security

JULY 3, 2024

Moreover, gaining root access would enable attackers to bypass critical security mechanisms such as firewalls, intrusion detection systems, and logging mechanisms, further obscuring their activities.

Firewall 328

Firewall Data breaches Malware Risk 328

The Last Watchdog

MAY 9, 2022

Keep your firewall turned on. Software based firewalls are widely recommended for single computers, while hardware firewalls are typically provided with routers for networks. Some operating systems provide native software firewalls (such as Windows OS).

Backups 247

Backups Firewall Software Mobile 247

Schneier on Security

JULY 8, 2021

Once executed, the malware changes the firewall settings to allow local windows systems to be discovered. In the case here, Agent.exe drops an outdated version that is vulnerable to DLL Side-Loading of “msmpeng.exe,” which is the file for the Windows Defender executable.

Ransomware 359

Ransomware Malware Firewall Encryption 359

The Hacker News

SEPTEMBER 6, 2024

SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible. The vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 out of a maximum of 10. "An

Firewall 140

Firewall 140

Penetration Testing

NOVEMBER 15, 2024

Today, Palo Alto Networks, a leading cybersecurity firm, has issued an urgent update to a recent security advisory, raising the severity level to “Critical” after observing active exploitation of a... The post Palo Alto Networks Raises Alarm on Firewall Vulnerability Following Active Exploitation appeared first on Cybersecurity (..)

Firewall 70

Firewall Cybersecurity 70

Schneier on Security

JANUARY 26, 2022

As the threat actors claim the attack is conducted through a zero-day vulnerability, it is strongly advised that all QNAP users disconnect their devices from the Internet and place them behind a firewall.

Ransomware 265

Ransomware Firewall Encryption Internet 265

The Last Watchdog

MARCH 29, 2022

I’m referring to Security Information and Event Management ( SIEM ) systems and to firewalls. This will come to fruition on smarter platforms using automated tools, including advanced firewalls. Firewalls predate SIEMs. Firewalls arrived on day one of companies connecting their networks to the Internet.

Firewall 223

Firewall Internet Internet Digital transformation 223

Tech Republic Security

MAY 31, 2023

Best practices for securing your Mac against potential hacks and security vulnerabilities include enabling the firewall, using strong passwords and encryption, and enabling Lockdown Mode. The post 8 best practices for securing your Mac from hackers in 2023 appeared first on TechRepublic.

Firewall 190

Firewall Encryption Passwords Hacking 190

Tech Republic Security

MARCH 8, 2024

Unlocator VPN + Free Smart DNS blasts through firewalls, censorship and geo-restrictions so you will always be able to access your favorite content. Use code ENJOY20 at checkout.

DNS 139

DNS VPN Firewall 139

Security Affairs

NOVEMBER 16, 2024

Palo Alto Networks confirmed active exploitation of a zero-day in its PAN-OS firewall and released new indicators of compromise (IoCs). Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 Base Score: 9.3)

Firewall 133

Firewall Internet Internet VPN 133

Troy Hunt

APRIL 29, 2021

The Romanian gov also came on board this week (that brings it to 15 govs on HIBP) Sponsored by: CrowdSec - The open-source massively multiplayer firewall: respond to attacks & share signals across the community. References Here's the thread on the ~250M US people data set (at 51.6% Download it for free.

IoT 251

IoT Firewall Data breaches Malware 251

Schneier on Security

FEBRUARY 12, 2021

ArsTechnica is reporting on the poor cybersecurity at the plant: The Florida water treatment facility whose computer system experienced a potentially hazardous computer breach last week used an unsupported version of Windows with no firewall and shared the same TeamViewer password among its employees, government officials have reported.

Manufacturing 295

Manufacturing Firewall Media Passwords 295