NopSec

JANUARY 31, 2024

Researchers discovered that the same mechanism that facilitated path traversal via classname manipulation could also be exploited to define ColdFusion specific elements, i.e. server side scripts, which includes the <cfexecute> tag used to start a process on the server. We encourage everyone to read the full blog at SecureLayer7.

VPN 59

VPN Government Risk Hacking 59

NopSec

JULY 18, 2017

With that in mind, in this blog post we’re covering 13 out of the 20 controls. CSC12 – Boundary Defense How Unified VRM Helps: Port scanning, fingerprinting as well as VPN connections vulnerability identification are all steps performed in a vulnerability scans, both embedded and as a import.

Wireless 40

Wireless Penetration Testing Software Authentication 40

Duo's Security Blog

JANUARY 28, 2022

This includes the use of cloud based infrastructure Applications — tested internally and externally Data — categorized and tagged using cloud security services and enterprise logging capabilities What’s Notable in the Memo?

Authentication 52

Authentication Government DNS Encryption 52

Cisco Security

AUGUST 28, 2023

An example of this was noticed with an Urban VPN (Virtual Private Network) provider which appears to grab configuration files in clear text with basic authentication. Base64 credentials used by Urban VPN to get configuration files. The same script was then copied and amended to add tags to devices. However, it didn’t work.

Wireless 60

Wireless DNS Mobile Technology 60

McAfee

DECEMBER 1, 2020

Many organizations therefore forced home-based users to hairpin all traffic back to the corporate data center via VPN so that they could be protected by the network data loss prevention (DLP) system. The post Think Beyond the Edge: Why SASE is Incomplete Without Endpoint DLP appeared first on McAfee Blogs.

Digital transformation 90

Digital transformation Cloud Migration Technology Mobile 90

Troy Hunt

JANUARY 10, 2018

Blocking legitimate users is part of that problem, blocking users wanting to protect their traffic with a VPN is another: This has been there for the past year now. They also blacklist vpn IP addresses. Much of what I'm going to cover in the remainder of this blog post will focus on the site at uidai.gov.in

Hacking 279

Hacking Government Risk Encryption 279

SecureList

APRIL 27, 2021

The attackers used vulnerabilities in an SSL-VPN product to deploy a multi-layered loader we dubbed Ecipekac (aka DESLoader, SigLoader and HEAVYHAND). In November and December 2020, two public blog posts were published about this campaign. We attribute this activity to APT10 with high confidence.

Malware 138

Malware Spyware Government Social Engineering 138

SecureList

NOVEMBER 14, 2022

Last June, Google’s TAG team released a blog post documenting attacks on Italian and Kazakh users that they attribute to RCS Lab, an Italian offensive software vendor. Okta was breached through one of its service providers, Sitel, itself compromised via the insecure VPN gateway of a recently acquired company.

Firmware 106

Firmware Surveillance Mobile Telecommunications 106