article thumbnail

News Alert: i2Coalition launches ‘VPN Trust Initiative’ to promote VPN operators’ best practices

The Last Watchdog

26, 2023 — The Internet Infrastructure Coalition (i2Coalition) launched the VPN Trust Initiative (VTI) in 2020 to establish a baseline for how virtual private network (VPN) providers should operate. Advertising Practices: Given the complexity and different use cases for VPNs, claims must not mislead.

VPN 100
article thumbnail

Palo Alto Networks addresses tens of serious issues in PAN-OS

Security Affairs

One of the most severe vulnerabilities, tracked as CVE-2020-2018 , is an authentication bypass vulnerability in the Panorama context switching feature. This vulnerability does not impact Panorama configured with custom certificates authentication for communication between Panorama and managed devices. The issue received a CVSSv3.1

Firewall 103
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

DNA testing company fined after customer data theft

Malwarebytes

What happened in the 2021 breach When DDC acquired Orchid Cellmark, a British company also in the DNA testing industry, as part of its business expansion in 2012, the company didn't know that it also inherited legacy databases that kept personally identifiable information (PII) in plain text form.

article thumbnail

Second colossal LinkedIn “breach” in 3 months, almost all users affected

Malwarebytes

According to Privacy Shark, the VPN company who first reported on this incident , a seller called TomLiner showed them he was in possession of 700 million Linkedin user records. Start with security: Make sure you have two-factor authentication (2FA) enabled. Don’t know what HaveIBeenPwned is?

article thumbnail

Water utility CISO offers tips to stay secure as IT and OT converge

SC Magazine

From an economics point of view, solutions that can be simultaneously implemented across both IT and OT environments – such as secure-access platforms with two-factor or multi-factor authentication – is a good place for a utility to start, she added, speaking in an online webinar organized by Cisco Systems.

CISO 82
article thumbnail

Top Trending CVEs of September 2022

NopSec

The vulnerability is listed as remote and unauthenticated, however known exploitation paths require file creation or modification privileges, which implies authenticated access in most environments. That leaves your corporate VPN servers as likely targets. This is a pretty serious vulnerability. The published research is detailed.

Risk 52
article thumbnail

Top Trending CVEs of November 2023

NopSec

Citrix NetScaler ADC and Gateway devices provide load balancing, traffic management, and VPN services for enterprise networks. This basically results in authentication bypass. Citrix Bleed CVE-2023-4966 Citrix Bleed is an information disclosure vulnerability that impacts Citrix NetScaler ADC and NetScaler Gateway.