Remove 2020 Remove Cybersecurity Remove Firewall
article thumbnail

U.S. CISA adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Outlook, Sophos XG Firewall, and other flaws to its Known Exploited Vulnerabilities catalog. The vulnerability CVE-2020-15069 (CVSS score of 9.8) is a buffer overflow issue in Sophos XG Firewall 17.x ” reads the advisory published by Microsoft.

Firewall 122
article thumbnail

Why Discomfort Might Be the Ultimate Power Move for Cybersecurity Leaders

Jane Frankland

” For cybersecurity leaders navigating the high-stakes world of defending critical systems, this phrase takes on a whole new meaning. In it, I’ll be examining how pain in cybersecurity leadership isn’t just a nuisance. Consider the SolarWinds breach of 2020. Most of us have heard the saying, “No pain, no gain.”

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Sophos fixed critical vulnerabilities in its Firewall product

Security Affairs

Sophos fixed three Sophos Firewall flaws that could lead to SQL injection, privileged SSH access to devices, and remote code execution. Sophos has addressed three vulnerabilities, respectively tracked as CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729, in its Sophos Firewall solution. GA (21.0.0) GA (21.0.0) of devices.

article thumbnail

Cybersecurity in Aviation: Rising Threats and Modernization Efforts

SecureWorld News

Most aviation processes are heavily digitized, and in the wake of new cyber threats, airlines and the broader sector must prioritize cybersecurity more than ever before. As airlines upgrade for connected sky-travel and regulators tighten their grip with new rules, the stakes for cybersecurity have never been higher.

article thumbnail

Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide

Security Affairs

Sophos used custom implants to monitor China-linked thret actors targeting firewall zero-days in a years-long battle. Sophos, with the help of other cybersecurity firms, government, and law enforcement agencies investigated the cyber attacks and attributed them multiple China-linked APT groups, such as Volt Typhoon , APT31 and APT41 / Winnti.

Firmware 120
article thumbnail

Palo Alto Networks Firewalls Exposed: BootHole and Other Critical Flaws Uncovered

Penetration Testing

Eclypsium researchers have uncovered multiple critical vulnerabilities in several Palo Alto Networks (PAN) next-generation firewalls (NGFWs). This report The post Palo Alto Networks Firewalls Exposed: BootHole and Other Critical Flaws Uncovered appeared first on Cybersecurity News.

article thumbnail

Top 15 Exploited Vulnerabilities of 2023

SecureWorld News

A new joint Cybersecurity Advisory, co-authored by leading cybersecurity agencies from the United States, Australia, Canada, New Zealand, and the United Kingdom, details the vulnerabilities malicious actors routinely exploited in 2023. CVE-2020-1472 (Microsoft Netlogon): Allows privilege escalation.

Software 113