Remove 2017 Remove Firewall Remove Information Security Remove Internet
article thumbnail

Russia-linked Cyclops Blink botnet targeting ASUS routers

Security Affairs

According to WatchGuard , Cyclops Blink may have affected roughly 1% of all active WatchGuard firewall appliances. In February, US and UK cybersecurity and law enforcement agencies published a joint security advisory about the Cyclops Blink bot that has been linked to the Russian-backed Sandworm APT group.

IoT 95
article thumbnail

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

Researchers recommend properly configuring the firewall to protect the devices exposed online, enable automatic updates, and monitor network traffic. LFI CVE-2018-16763 Fuel CMS 1.4.1 RCE CVE-2020-5902 F5 BigIP RCE No CVE (vulnerability published on 2019) ThinkPHP 5.X

Malware 142
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Chinese police arrested the operator of unauthorized VPN service that made $1.6 million from his activity

Security Affairs

China continues to intensify the monitoring of the cyberspace applying and persecution of VPN services that could be used to bypass its censorship system known as the Great Firewall. The Great Firewall project already blocked access to more hundreds of the world’s 1,000 top websites, including Google, Facebook, Twitter, and Dropbox.

VPN 65
article thumbnail

New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

Security Affairs

The new malware implement new and improved rootkit and worm capabilities, it continues to target cloud applications by exploiting known vulnerabilities such as Oracle WebLogic ( CVE-2017-10271 ) and Apache ActiveMQ ( CVE-2016-3088 ) servers. Disable the iptables firewall so that the malware will have full access to the internet.

Malware 85
article thumbnail

CISA adds 8 new vulnerabilities to its Known Exploited Vulnerabilities Catalog

Security Affairs

The vulnerability is an unauthenticated stack-based buffer overflow that was reported by Jacob Baines , lead security researcher at Rapid7. The CVE-2021-20038 vulnerability impacts SMA 100 series appliances (including SMA 200, 210, 400, 410, and 500v) even when the web application firewall (WAF) is enabled.

article thumbnail

China used the Great Cannon DDoS Tool against forum used by Hong Kong protestors

Security Affairs

The last time the Great Cannon was used by the Chinese authorities was in 2017 when it was involved in DDoS attacks on the Mingjingnews.com site, a US-based Chinese media outlet. ” states a report published by Citizen Lab researchers published in 2015. . ” states a report published by Citizen Lab researchers published in 2015.

DDOS 63
article thumbnail

US dismantled the Russia-linked Cyclops Blink botnet

Security Affairs

. “The Justice Department today announced a court-authorized operation, conducted in March 2022, to disrupt a two-tiered global botnet of thousands of infected network hardware devices under the control of a threat actor known to security researchers as Sandworm, which the U.S. ” reads the press release published by DoJ.

Malware 80