article thumbnail

Defining a Cloud Permissions Firewall

Security Boulevard

Sonrai recently launched the first-ever Cloud Permissions Firewall – a new class of solution built to more efficiently protect sensitive permissions and access.

article thumbnail

Logic Flaws Let Attackers Bypass Cloudflare’s Firewall and DDoS Protection

Heimadal Security

The effectiveness of Cloudflare’s Firewall and DDoS prevention has been proven to be compromised by an attack technique that takes the use of logical vulnerabilities in cross-tenant security policies. This finding has sparked worries about possible vulnerabilities that could damage the security company’s clients.

Firewall 108
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Critical Zyxel Firewall Vulnerability Exploited in DDOS Attacks

Heimadal Security

Multiple DDoS botnets have actively exploited a critical vulnerability discovered in Zyxel firewall models, as revealed by cybersecurity researchers. Tracked as CVE-2023-28771, this flaw explicitly impacts Linux platforms and enables remote attackers to gain unauthorized control over vulnerable systems, effectively launching DDoS attacks.

article thumbnail

Network Firewall vs. Web Application Firewall (WAF)

Security Boulevard

Businesses are taking a closer look at their firewall’s capabilities and considering mixing and matching technologies to cover new security gaps. . Continue reading Network Firewall vs. Web Application Firewall (WAF) at Sucuri Blog.

article thumbnail

Chinese DriftingCloud APT exploited Sophos Firewall Zero-Day before it was fixed

Security Affairs

China-linked threat actors exploited the zero-day flaw CVE-2022-1040 in Sophos Firewall weeks before it was fixed by the security vendor. On March 25, Sophos announced to have fixed the authentication bypass vulnerability, tracked as CVE-2022-1040, that resides in the User Portal and Webadmin areas of Sophos Firewall. MR3 (18.5.3)

Firewall 140
article thumbnail

Zyxel addresses four flaws affecting APs, AP controllers, and firewalls

Security Affairs

Zyxel addressed multiple vulnerabilities impacting many of its products, including APs, AP controllers, and firewalls. Zyxel has released security updates to address multiple vulnerabilities affecting multiple products, including firewall, AP, and AP controller products. To nominate, please visit:?. Pierluigi Paganini.

Firewall 132
article thumbnail

Vulnerability Alert! Two New Exploited Flaws Discovered on Zyxel Firewalls

Heimadal Security

CISA included CVE-2023-33009 and CVE-2023-33010 Zyxel Firewalls flaws in its Known Exploited Vulnerabilities (KEV) catalog. Two New Exploited Flaws Discovered on Zyxel Firewalls appeared first on Heimdal Security Blog. The new CVEs could lead to a denial-of-service (DoS) condition and remote code execution.